Having 'create_foos' does not guarantee that user can actually create a particular foo because there might be a filter limiting what foos a user is allowed to create. However the information whether user has a create permission is useful - it means that it can at least create some foos, therefore we should show links and allow access to create form. If a user user does not have create permission and tries to access create form, we should show 'permission denied' instead of a form as we already do on existing pages. If a user has permission with a filter, we should show form and let backend handle the filters after submit.