Attempt to fix #3505

Author: dizzzz

exist-core/src/main/java/org/exist/storage/NativeBroker.java

@@ -744,6 +744,10 @@ private Tuple2<Boolean, Collection> getOrCreateCollectionExplicit_rootCollection
             final CollectionCache collectionCache, final Optional<Tuple2<Permission, Long>> creationAttributes)
             throws TriggerException, ReadOnlyException, PermissionDeniedException, LockException, IOException {
 
+        if(!parentCollection.getPermissionsNoLock().validate(getCurrentSubject(), Permission.WRITE)){
+            throw new PermissionDeniedException("No write permissions for " + parentCollection.getURI().getCollectionPath());
+        }
+
         final CollectionTrigger trigger;
         if(parentCollection == null) {
             trigger = new CollectionTriggers(this, transaction);