Expanded permissions model.
Added permissions check for create_linked_entity