diff --git a/messaging/service/permissions.go b/messaging/service/permissions.go
index 2849f1b29..28633e4aa 100644
--- a/messaging/service/permissions.go
+++ b/messaging/service/permissions.go
@@ -104,15 +104,15 @@ func (p *permissions) CanGrant() bool {
 }
 
 func (p *permissions) CanCreatePublicChannel() bool {
-	return p.checkAccess("messaging", "channel.public.create")
+	return p.checkAccess("messaging", "channel.public.create", p.allow())
 }
 
 func (p *permissions) CanCreatePrivateChannel() bool {
-	return p.checkAccess("messaging", "channel.private.create")
+	return p.checkAccess("messaging", "channel.private.create", p.allow())
 }
 
 func (p *permissions) CanCreateGroupChannel() bool {
-	return p.checkAccess("messaging", "channel.group.create")
+	return p.checkAccess("messaging", "channel.group.create", p.allow())
 }
 
 func (p *permissions) CanUpdateChannel(ch *types.Channel) bool {
@@ -242,6 +242,12 @@ func (p permissions) canLeaveFallback(ch *types.Channel) func() internalRules.Ac
 	}
 }
 
+func (p permissions) allow() func() internalRules.Access {
+	return func() internalRules.Access {
+		return internalRules.Allow
+	}
+}
+
 func (p permissions) isChannelOwnerFallback(ch *types.Channel) func() internalRules.Access {
 	return func() internalRules.Access {
 		userID := auth.GetIdentityFromContext(p.ctx).Identity()