Usually you will check if a user can create a resource on a higher level containing resource that exists in the system and for which the user has some relationship. This could even be a platform singleton.