disallow card creation if no edit permission+difficulty

medium