Using permissions to allow users to create products