Yep, you're right that creating a document is likely to be a permission on the folder/account/owner of the document