The admin user does not permission to create items in
the new privilege-system. This was formerly included
with the edit permission.

attached is a trivial patch to security.py