users now require permission to create containers -> bookbags