Add entity-specific permission check to batch_create.