"Create any Thing" menu pick doesn't respect fine-grained permissions
Summary:
Original email from Eric:
The Actions > Create menu item is enabled or disabled based on the Custom Role's Space-wide Create permission, not whether the Custom Role has any Create permissions within the Space.
* In my case, the Role should only be able to create certain specified Things, not "everything except for denied Things", so the space-wide box is unchecked. This seems to disable the menu item.
* If I navigate directly to a "create" URL, I'm (correctly) allowed to create a Thing, and the dropdown of Models I can use is correct (except as impacted by the next issue)
This is kind of a horrible pain in the ass, because in principle the disabling of Create any Thing depends on whether this person can create any Model. But there's no centralized concept of that which we can easily query. Which probably suggests that disabling this menu pick at all is just plain unsound, and we have to give up on it.
(Worse -- the same is also true for Design a Model, and maybe other menu items. Bleah...)