Make sure resource creation/update takes care of new_document_in_root permission