handle card creation when can't create Basic+solution

I think we only want to offer the edit interface at all if (a) a type is specified that a user has permission to create, or (b) the user can create basic cards.

In other words, if an anonymous user who can only create "Fruit" cards clicks on a red "Canada" link, he should get a denial, not a fruit interface.