users with no permissions to add Foo, should not see "add child Foo'

We render a link under each node that can get children, but we do not check for the permission to actually add that node-type!