Check create, not write, to run a method on an unsaved doc

Running a whitelisted method on an unsaved document now requires create permission rather than write.