Instead of using the same permission for using and creating hookups, those two permissions should be split up into f_hookup and f_hookup_create.