improve logic for hiding create/delete buttons based on the rules permitted by the collection

[parkuman]

right now we hide the create / delete buttons if the rule is null. we should show these buttons if the user actually has permission to do that action, rather than assuming they can perform that action