Fixes #20 - added create permission to product.