"Create documents" is a blanket permission for a user to create a document of any document type
I see that 'create documents' permission is only available in the Roles. So if a user is given that permission, he can create documents of any document type. Its like a blanket permission. While uploading a new document, he gets to see all the document types in the drop down. So he is able to choose a document type for which he does'nt have say a view permission (I prefer not to give View documents permission in the role since the users of that role can view all documents, rather set the view permission in the document type ACL)
I hope something can be done about this. Would'nt it be cleaner to give 'create documents' permission in the document type ACLs also, and the user then gets to create documents for only those document types which have been permitted through the document type ACLs.