fix i#74, creation_permission policy