When request is made to publish drafts, we create `Note`s from
the `DraftNote`s. So if user can't create notes, they shouldn't be
able to publish draft notes as well.

Check if user can `:create_note` when publishing and deny if not.