perm read on new one

index.js

@@ -422,7 +422,7 @@ const mm = db => {
                 const acl = (permissions && 
                                 permissions[permission] || 
                                     this.__proto__.constructor.defaultPermissions[permission]).map(tag => tag.toString())
-            //    if (!this._id) return true; //if new entity you can anything
+                if (!this._id && permission === 'read') return true; //if new entity you can anything
                 if (acl.includes('owner') && obj.___owner && userACL.includes(obj.___owner.toString())){
                     return true
                 }