title: SilverStripe Model-Level Permissions: canCreate() doesn't work
body: <p>I have dataobject :</p>
  
  <pre><code>class Documents extends DataObject implements PermissionProvider {
  
  private static $db = array(
      'DocType' =&gt; 'Text',
      'ApprovalDate' =&gt; 'Date',
      'PublicationDate' =&gt; 'Date',
      'DocNumber' =&gt; 'Text',
      'DocTitle' =&gt; 'Text',
      'KeyWords' =&gt; 'Text'
           );
  
  private static $has_one = array(
      'Member' =&gt; 'Member'
  );
  ...
  static $api_access = true; 
  
  public function canEdit($member = false) {
  
  return (Member::currentUserID() == $this-&gt;MemberID) || parent::canEdit($member);
  }
  
  public function canDelete($member = false) {
     return (Member::currentUserID() == $this-&gt;MemberID) ||   parent::canDelete($member);
  }
  
  public function canView($member = false) {
   return Permission::check('DOCUMENTS_VIEW');
  }
  
  public function canCreate($member = false) {
  return Permission::check('DOCUMENTS_CREATE');
  }
  
  function providePermissions() {
      return array(
        'DOCUMENTS_VIEW' =&gt; 'View Documents ',
        'DOCUMENTS_EDIT' =&gt; 'Edit Documents ',
        'DOCUMENTS_DELETE' =&gt; 'Delete Documents ',
        'DOCUMENTS_CREATE' =&gt; 'Create Documents '
   );
  } 
  </code></pre>
  
  <p>I have created group "Documents Developer" and granted it rightes DOCUMENTS_VIEW, EDIT, DELETE, CREATE. I want all users of this group  could only view all documents and create new documents, and only owner (user with ID == MemberID) could edit and delete his documents.
  It works OK when user tryes to edit or delete his documents, or view other documents. But when he tryes to create new document (push "create" button in CMS), a pop-up window "Forbidden" appeares: <a href="https://yadi.sk/i/bBbnYwa3qtxVy" rel="nofollow">(You can see CMS Window here)</a> 
  Give me please any ideas.</p>