add a permission called

create_appointment

on the city and wire that through, is the general recommendation