in src/main/java/org/apache/sling/jcr/resourcesecurity/impl/ResourceAccessGateFactory.java [180:182]
public GateResult canCreate(String absPathName, ResourceResolver resourceResolver) {
return this.checkPermission(resourceResolver, absPathName, Session.ACTION_ADD_NODE);
}