diff --git a/src/bundle/Controller/DashboardController.php b/src/bundle/Controller/DashboardController.php
index 4e422b14f7..092a7d1a5b 100644
--- a/src/bundle/Controller/DashboardController.php
+++ b/src/bundle/Controller/DashboardController.php
@@ -11,25 +11,34 @@
 use EzSystems\EzPlatformAdminUi\Form\Data\Content\Draft\ContentEditData;
 use EzSystems\EzPlatformAdminUi\Form\Factory\FormFactory;
 use eZ\Publish\API\Repository\PermissionResolver;
+use Symfony\Component\HttpFoundation\Response;
 
 class DashboardController extends Controller
 {
+    /** @var \EzSystems\EzPlatformAdminUi\Form\Factory\FormFactory */
     protected $formFactory;
 
     /** @var \eZ\Publish\API\Repository\PermissionResolver */
     private $permissionResolver;
 
     /**
-     * @param \EzSystems\EzplatformAdminUi\Form\Factory\FormFactory $formFactory
+     * @param \EzSystems\EzPlatformAdminUi\Form\Factory\FormFactory $formFactory
      * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
      */
-    public function __construct(FormFactory $formFactory, PermissionResolver $permissionResolver)
-    {
+    public function __construct(
+        FormFactory $formFactory,
+        PermissionResolver $permissionResolver
+    ) {
         $this->formFactory = $formFactory;
         $this->permissionResolver = $permissionResolver;
     }
 
-    public function dashboardAction()
+    /**
+     * @return \Symfony\Component\HttpFoundation\Response
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException
+     */
+    public function dashboardAction(): Response
     {
         $editForm = $this->formFactory->contentEdit(
             new ContentEditData()
diff --git a/src/bundle/Controller/SectionController.php b/src/bundle/Controller/SectionController.php
index 05ce572d7a..bd5e9ec365 100644
--- a/src/bundle/Controller/SectionController.php
+++ b/src/bundle/Controller/SectionController.php
@@ -31,7 +31,7 @@
 use EzSystems\EzPlatformAdminUi\Form\SubmitHandler;
 use EzSystems\EzPlatformAdminUi\Notification\NotificationHandlerInterface;
 use EzSystems\EzPlatformAdminUi\UI\Service\PathService;
-use EzSystems\EzPlatformAdminUi\Util\PermissionUtil;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
 use EzSystems\EzPlatformAdminUiBundle\View\EzPagerfantaView;
 use EzSystems\EzPlatformAdminUiBundle\View\Template\EzPagerfantaTemplate;
 use Pagerfanta\Adapter\ArrayAdapter;
@@ -80,8 +80,8 @@ class SectionController extends Controller
     /** @var \eZ\Publish\API\Repository\PermissionResolver */
     private $permissionResolver;
 
-    /** @var \EzSystems\EzPlatformAdminUi\Util\PermissionUtil */
-    private $permissionUtil;
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
 
     /** @var int */
     private $defaultPaginationLimit;
@@ -99,7 +99,7 @@ class SectionController extends Controller
      * @param \eZ\Publish\API\Repository\LocationService $locationService
      * @param \EzSystems\EzPlatformAdminUi\UI\Service\PathService $pathService
      * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
-     * @param \EzSystems\EzPlatformAdminUi\Util\PermissionUtil $permissionUtil
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
      * @param int $defaultPaginationLimit
      */
     public function __construct(
@@ -115,7 +115,7 @@ public function __construct(
         LocationService $locationService,
         PathService $pathService,
         PermissionResolver $permissionResolver,
-        PermissionUtil $permissionUtil,
+        PermissionCheckerInterface $permissionChecker,
         int $defaultPaginationLimit
     ) {
         $this->notificationHandler = $notificationHandler;
@@ -131,7 +131,7 @@ public function __construct(
         $this->pathService = $pathService;
         $this->defaultPaginationLimit = $defaultPaginationLimit;
         $this->permissionResolver = $permissionResolver;
-        $this->permissionUtil = $permissionUtil;
+        $this->permissionChecker = $permissionChecker;
     }
 
     public function performAccessCheck(): void
@@ -518,31 +518,12 @@ private function canUserAssignSectionToSomeContent(Section $section): bool
             return $hasAccess;
         }
 
-        if (!empty($restrictedNewSections = $this->getRestrictedNewSectionsIds($hasAccess))) {
-            return in_array($section->id, $restrictedNewSections, true);
+        $restrictedNewSections = $this->permissionChecker->getRestrictions($hasAccess, NewSectionLimitation::class);
+        if (!empty($restrictedNewSections)) {
+            return in_array($section->id, array_map('intval', $restrictedNewSections), true);
         }
 
         // If a user has other limitation than NewSectionLimitation, then a decision will be taken later, based on selected Content.
         return true;
     }
-
-    /**
-     * @param array $hasAccess
-     *
-     * @return int[]
-     */
-    private function getRestrictedNewSectionsIds(array $hasAccess): array
-    {
-        $restrictedSectionsIds = [];
-
-        foreach ($this->permissionUtil->flattenArrayOfLimitations($hasAccess) as $limitation) {
-            if ($limitation instanceof NewSectionLimitation) {
-                foreach ($limitation->limitationValues as $sectionsId) {
-                    $restrictedSectionsIds[] = (int)$sectionsId;
-                }
-            }
-        }
-
-        return array_unique($restrictedSectionsIds);
-    }
 }
diff --git a/src/bundle/Resources/config/services.yml b/src/bundle/Resources/config/services.yml
index bde429a9ad..bcb1212b95 100644
--- a/src/bundle/Resources/config/services.yml
+++ b/src/bundle/Resources/config/services.yml
@@ -18,6 +18,8 @@ imports:
     - { resource: services/translation.yml }
     - { resource: services/user_settings.yml }
     - { resource: services/rest.yml }
+    - { resource: services/permissions.yml }
+    - { resource: services/forms.yml }
 
 services:
     _defaults:
@@ -76,22 +78,6 @@ services:
         tags:
             - {name: kernel.event_subscriber}
 
-    EzSystems\EzPlatformAdminUi\Form\SubmitHandler: ~
-
-    EzSystems\EzPlatformAdminUi\Form\Type\:
-        resource: '../../../lib/Form/Type'
-
-    EzSystems\EzPlatformAdminUi\Form\DataMapper\:
-        resource: '../../../lib/Form/DataMapper'
-
-    EzSystems\EzPlatformAdminUi\Form\Type\Language\LanguageChoiceType:
-        arguments:
-            $siteAccessLanguages: '$languages$'
-
-    EzSystems\EzPlatformAdminUi\Form\Type\Policy\PolicyChoiceType:
-        arguments:
-            $policyMap: "%ezpublish.api.role.policy_map%"
-
     EzSystems\EzPlatformAdminUi\UI\Dataset\DatasetFactory:
         arguments:
             $userContentTypeIdentifier: '$user_content_type_identifier$'
@@ -105,16 +91,10 @@ services:
         tags:
             - { name: form.type }
 
-    EzSystems\EzPlatformAdminUi\Form\Factory\FormFactory: ~
-
     EzSystems\EzPlatformAdminUi\Notification\FlashBagNotificationHandler: ~
 
     EzSystems\EzPlatformAdminUi\Notification\NotificationHandlerInterface: '@EzSystems\EzPlatformAdminUi\Notification\FlashBagNotificationHandler'
 
-    EzSystems\EzPlatformAdminUi\Form\Type\Extension\Content\ContentEditTypeExtension:
-        tags:
-            - { name: form.type_extension, extended_type: EzSystems\RepositoryForms\Form\Type\Content\ContentEditType }
-
     EzSystems\EzPlatformAdminUi\RepositoryForms\View\ViewParametersListener:
         public: true
         tags:
@@ -139,9 +119,6 @@ services:
         tags:
             - { name: knp_menu.voter }
 
-    EzSystems\EzPlatformAdminUi\Form\EventListener\:
-        resource: '../../../lib/Form/EventListener'
-
     EzSystems\EzPlatformAdminUi\RepositoryForms\Dispatcher\ContentOnTheFlyDispatcher:
         calls:
             - [setEventDispatcher, ["@event_dispatcher"]]
diff --git a/src/bundle/Resources/config/services/forms.yml b/src/bundle/Resources/config/services/forms.yml
new file mode 100644
index 0000000000..ef57c3f337
--- /dev/null
+++ b/src/bundle/Resources/config/services/forms.yml
@@ -0,0 +1,49 @@
+services:
+    _defaults:
+        autowire: true
+        autoconfigure: true
+        public: false
+
+    EzSystems\EzPlatformAdminUi\Form\SubmitHandler: ~
+
+    EzSystems\EzPlatformAdminUi\Form\Factory\FormFactory: ~
+
+    EzSystems\EzPlatformAdminUi\Form\DataMapper\:
+        resource: '../../../lib/Form/DataMapper'
+
+    EzSystems\EzPlatformAdminUi\Form\Type\:
+        resource: '../../../lib/Form/Type'
+
+    EzSystems\EzPlatformAdminUi\Form\EventListener\:
+        resource: '../../../lib/Form/EventListener'
+
+    EzSystems\EzPlatformAdminUi\Form\Type\Extension\Content\ContentEditTypeExtension:
+        tags:
+            - { name: form.type_extension, extended_type: EzSystems\RepositoryForms\Form\Type\Content\ContentEditType }
+
+    EzSystems\EzPlatformAdminUi\Form\Type\Policy\PolicyChoiceType:
+        arguments:
+            $policyMap: "%ezpublish.api.role.policy_map%"
+
+    EzSystems\EzPlatformAdminUi\Form\Type\Content\Draft\ContentCreateType:
+        arguments:
+            $contentTypeChoiceLoader: '@EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\PermissionAwareContentTypeChoiceLoader'
+            $languageChoiceLoader: '@EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\PermissionAwareLanguageChoiceLoader'
+
+    EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader: ~
+
+    EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader:
+        arguments:
+            $siteAccessLanguages: '$languages$'
+
+    EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\PermissionAwareContentTypeChoiceLoader:
+        arguments:
+            $decorated: '@EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader'
+            $module: 'content'
+            $function: 'create'
+
+    EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\PermissionAwareLanguageChoiceLoader:
+        arguments:
+            $decorated: '@EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader'
+            $module: 'content'
+            $function: 'create'
diff --git a/src/bundle/Resources/config/services/permissions.yml b/src/bundle/Resources/config/services/permissions.yml
new file mode 100644
index 0000000000..8f18779f19
--- /dev/null
+++ b/src/bundle/Resources/config/services/permissions.yml
@@ -0,0 +1,10 @@
+services:
+    _defaults:
+        autowire: true
+        autoconfigure: true
+        public: false
+
+    EzSystems\EzPlatformAdminUi\Permission\PermissionChecker: ~
+
+    EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface:
+        alias: EzSystems\EzPlatformAdminUi\Permission\PermissionChecker
diff --git a/src/bundle/Resources/public/scss/_forms.scss b/src/bundle/Resources/public/scss/_forms.scss
index 0ceb928a9e..96b7fb7d6b 100644
--- a/src/bundle/Resources/public/scss/_forms.scss
+++ b/src/bundle/Resources/public/scss/_forms.scss
@@ -101,3 +101,7 @@ form:not(.form-inline) {
         position: absolute;
     }
 }
+
+.ez-content-create[readonly] {
+    pointer-events: none;
+}
diff --git a/src/bundle/Resources/views/content/widgets/content_create.html.twig b/src/bundle/Resources/views/content/widgets/content_create.html.twig
index caa1c80f7f..ca94b1f294 100644
--- a/src/bundle/Resources/views/content/widgets/content_create.html.twig
+++ b/src/bundle/Resources/views/content/widgets/content_create.html.twig
@@ -4,14 +4,14 @@
     <div class="ez-extra-actions__header">{{ 'content.create.choose_content_type'|trans|desc('Create your content') }}</div>
     <div class="ez-extra-actions__content">
         {{ form_start(form, { 'action': path('ezplatform.content.create'), 'attr': { 'autocomplete': 'off' } }) }}
-            {% if form.language.vars.choices|length == 1 %}
-                {{ form_widget(form.language, {'attr': {'hidden': true}}) }}
-            {% else %}
-                <div class="ez-extra-actions__section-header">{{ 'content.create.select_language'|trans|desc('Select language') }}</div>
-                <div class="ez-extra-actions__section-content">
+            <div class="ez-extra-actions__section-header">{{ 'content.create.select_language'|trans|desc('Select language') }}</div>
+            <div class="ez-extra-actions__section-content">
+                {% if form.language.vars.choices|length == 1 %}
+                    {{ form_widget(form.language, {'attr': {'class': 'ez-content-create', 'readonly': true}}) }}
+                {% else %}
                     {{ form_widget(form.language) }}
-                </div>
-            {% endif %}
+                {% endif %}
+            </div>
             <div class="ez-extra-actions__section-header">{{ 'content.create.select_content_type'|trans|desc('Select Content Type') }}</div>
             <div class="ez-extra-actions__section-content ez-extra-actions__section-content--content-type">
                 <div class="ez-instant-filter">
diff --git a/src/bundle/Resources/views/dashboard/dashboard.html.twig b/src/bundle/Resources/views/dashboard/dashboard.html.twig
index e8f6ce0861..210caddf25 100644
--- a/src/bundle/Resources/views/dashboard/dashboard.html.twig
+++ b/src/bundle/Resources/views/dashboard/dashboard.html.twig
@@ -12,8 +12,11 @@
                 <div class="container ez-dashboard__header">
                     <h1 class="py-3">{{ 'my.dashboard'|trans|desc('My dashboard') }}</h1>
                     <div class="ez-dashboard__create">
-                        <button type="button" class="btn btn-primary ez-btn--cotf-create" data-udw-config="{{ ez_udw_config('create', {}) }}" {% if not can_create_content %}disabled{% endif %}>
-                            <svg class="ez-icon ez-icon--medium ez-icon--light">
+                        <button
+                            class="btn btn-primary ez-btn--cotf-create"
+                            data-udw-config="{{ ez_udw_config('create', {'type': 'content_create'}) }}"
+                            {% if not can_create_content %}disabled{% endif %}>
+                            <svg class="ez-icon ez-icon--medium ez-icon--light ez-icon-create">
                                 <use xlink:href="{{ asset('bundles/ezplatformadminui/img/ez-icons.svg') }}#create"></use>
                             </svg>
                             <span>{{ 'dashboard.create'|trans|desc('Create') }}</span>
diff --git a/src/lib/Form/Type/ChoiceList/Loader/ContentTypeChoiceLoader.php b/src/lib/Form/Type/ChoiceList/Loader/ContentTypeChoiceLoader.php
new file mode 100644
index 0000000000..721962a051
--- /dev/null
+++ b/src/lib/Form/Type/ChoiceList/Loader/ContentTypeChoiceLoader.php
@@ -0,0 +1,89 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader;
+
+use eZ\Publish\API\Repository\ContentTypeService;
+use Symfony\Component\Form\ChoiceList\ArrayChoiceList;
+use Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface;
+
+class ContentTypeChoiceLoader implements ChoiceLoaderInterface
+{
+    /** @var \eZ\Publish\API\Repository\ContentTypeService */
+    protected $contentTypeService;
+
+    /**
+     * @param \eZ\Publish\API\Repository\ContentTypeService $contentTypeService
+     */
+    public function __construct(ContentTypeService $contentTypeService)
+    {
+        $this->contentTypeService = $contentTypeService;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getChoiceList(): array
+    {
+        $contentTypes = [];
+        $contentTypeGroups = $this->contentTypeService->loadContentTypeGroups();
+        foreach ($contentTypeGroups as $contentTypeGroup) {
+            $contentTypes[$contentTypeGroup->identifier] = $this->contentTypeService->loadContentTypes($contentTypeGroup);
+        }
+
+        return $contentTypes;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoiceList($value = null)
+    {
+        $choices = $this->getChoiceList();
+
+        return new ArrayChoiceList($choices, $value);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoicesForValues(array $values, $value = null)
+    {
+        // Optimize
+        $values = array_filter($values);
+        if (empty($values)) {
+            return [];
+        }
+
+        // If no callable is set, values are the same as choices
+        if (null === $value) {
+            return $values;
+        }
+
+        return $this->loadChoiceList($value)->getChoicesForValues($values);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadValuesForChoices(array $choices, $value = null)
+    {
+        // Optimize
+        $choices = array_filter($choices);
+        if (empty($choices)) {
+            return [];
+        }
+
+        // If no callable is set, choices are the same as values
+        if (null === $value) {
+            return $choices;
+        }
+
+        return $this->loadChoiceList($value)->getValuesForChoices($choices);
+    }
+}
diff --git a/src/lib/Form/Type/ChoiceList/Loader/LanguageChoiceLoader.php b/src/lib/Form/Type/ChoiceList/Loader/LanguageChoiceLoader.php
new file mode 100644
index 0000000000..6066bb2e5b
--- /dev/null
+++ b/src/lib/Form/Type/ChoiceList/Loader/LanguageChoiceLoader.php
@@ -0,0 +1,106 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader;
+
+use eZ\Publish\API\Repository\LanguageService;
+use Symfony\Component\Form\ChoiceList\ArrayChoiceList;
+use Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface;
+
+class LanguageChoiceLoader implements ChoiceLoaderInterface
+{
+    /** @var \eZ\Publish\API\Repository\LanguageService */
+    protected $languageService;
+
+    /** @var string[] */
+    protected $siteAccessLanguages;
+
+    /**
+     * @param \eZ\Publish\API\Repository\LanguageService $languageService
+     * @param array $siteAccessLanguages
+     */
+    public function __construct(LanguageService $languageService, array $siteAccessLanguages)
+    {
+        $this->languageService = $languageService;
+        $this->siteAccessLanguages = $siteAccessLanguages;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getChoiceList(): array
+    {
+        $saLanguages = [];
+        $languagesByCode = [];
+
+        foreach ($this->languageService->loadLanguages() as $language) {
+            if ($language->enabled) {
+                $languagesByCode[$language->languageCode] = $language;
+            }
+        }
+
+        foreach ($this->siteAccessLanguages as $languageCode) {
+            if (!isset($languagesByCode[$languageCode])) {
+                continue;
+            }
+
+            $saLanguages[] = $languagesByCode[$languageCode];
+            unset($languagesByCode[$languageCode]);
+        }
+
+        return array_merge($saLanguages, array_values($languagesByCode));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoiceList($value = null)
+    {
+        $choices = $this->getChoiceList();
+
+        return new ArrayChoiceList($choices, $value);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoicesForValues(array $values, $value = null)
+    {
+        // Optimize
+        $values = array_filter($values);
+        if (empty($values)) {
+            return [];
+        }
+
+        // If no callable is set, values are the same as choices
+        if (null === $value) {
+            return $values;
+        }
+
+        return $this->loadChoiceList($value)->getChoicesForValues($values);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadValuesForChoices(array $choices, $value = null)
+    {
+        // Optimize
+        $choices = array_filter($choices);
+        if (empty($choices)) {
+            return [];
+        }
+
+        // If no callable is set, choices are the same as values
+        if (null === $value) {
+            return $choices;
+        }
+
+        return $this->loadChoiceList($value)->getValuesForChoices($choices);
+    }
+}
diff --git a/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareContentTypeChoiceLoader.php b/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareContentTypeChoiceLoader.php
new file mode 100644
index 0000000000..6573299cea
--- /dev/null
+++ b/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareContentTypeChoiceLoader.php
@@ -0,0 +1,117 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader;
+
+use eZ\Publish\API\Repository\PermissionResolver;
+use eZ\Publish\API\Repository\Values\User\Limitation\ContentTypeLimitation;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
+use eZ\Publish\API\Repository\Values\ContentType\ContentType;
+use Symfony\Component\Form\ChoiceList\ArrayChoiceList;
+use Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface;
+
+class PermissionAwareContentTypeChoiceLoader implements ChoiceLoaderInterface
+{
+    /** @var \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface */
+    private $decorated;
+
+    /** @var \eZ\Publish\API\Repository\PermissionResolver */
+    private $permissionResolver;
+
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
+
+    /** @var string */
+    private $module;
+
+    /** @var string */
+    private $function;
+
+    /**
+     * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
+     * @param \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader $decorated
+     * @param string $module
+     * @param string $function
+     */
+    public function __construct(
+        PermissionResolver $permissionResolver,
+        PermissionCheckerInterface $permissionChecker,
+        ContentTypeChoiceLoader $decorated,
+        string $module,
+        string $function
+    ) {
+        $this->decorated = $decorated;
+        $this->permissionResolver = $permissionResolver;
+        $this->permissionChecker = $permissionChecker;
+        $this->module = $module;
+        $this->function = $function;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoiceList($value = null)
+    {
+        $hasAccess = $this->permissionResolver->hasAccess($this->module, $this->function);
+        if (!is_bool($hasAccess)) {
+            $restrictedContentTypesIds = $this->permissionChecker->getRestrictions($hasAccess, ContentTypeLimitation::class);
+        }
+        $contentTypesGroups = $this->decorated->getChoiceList();
+
+        if (empty($restrictedContentTypesIds)) {
+            return new ArrayChoiceList($contentTypesGroups, $value);
+        }
+
+        foreach ($contentTypesGroups as $group => $contentTypes) {
+            $contentTypesGroups[$group] = array_filter($contentTypes, function (ContentType $contentType) use ($restrictedContentTypesIds) {
+                return in_array($contentType->id, $restrictedContentTypesIds);
+            });
+        }
+
+        return new ArrayChoiceList($contentTypesGroups, $value);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoicesForValues(array $values, $value = null)
+    {
+        // Optimize
+        $values = array_filter($values);
+        if (empty($values)) {
+            return [];
+        }
+
+        // If no callable is set, values are the same as choices
+        if (null === $value) {
+            return $values;
+        }
+
+        return $this->loadChoiceList($value)->getChoicesForValues($values);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadValuesForChoices(array $choices, $value = null)
+    {
+        // Optimize
+        $choices = array_filter($choices);
+        if (empty($choices)) {
+            return [];
+        }
+
+        // If no callable is set, choices are the same as values
+        if (null === $value) {
+            return $choices;
+        }
+
+        return $this->loadChoiceList($value)->getValuesForChoices($choices);
+    }
+}
diff --git a/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareLanguageChoiceLoader.php b/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareLanguageChoiceLoader.php
new file mode 100644
index 0000000000..f02e0c3a99
--- /dev/null
+++ b/src/lib/Form/Type/ChoiceList/Loader/PermissionAwareLanguageChoiceLoader.php
@@ -0,0 +1,117 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader;
+
+use eZ\Publish\API\Repository\PermissionResolver;
+use eZ\Publish\API\Repository\Values\User\Limitation\LanguageLimitation;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
+use eZ\Publish\API\Repository\Values\Content\Language;
+use Symfony\Component\Form\ChoiceList\ArrayChoiceList;
+use Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface;
+
+class PermissionAwareLanguageChoiceLoader implements ChoiceLoaderInterface
+{
+    /** @var \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface */
+    private $decorated;
+
+    /** @var \eZ\Publish\API\Repository\PermissionResolver */
+    private $permissionResolver;
+
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
+
+    /** @var string */
+    private $module;
+
+    /** @var string */
+    private $function;
+
+    /**
+     * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
+     * @param \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader $decorated
+     * @param string $module
+     * @param string $function
+     */
+    public function __construct(
+        PermissionResolver $permissionResolver,
+        PermissionCheckerInterface $permissionChecker,
+        LanguageChoiceLoader $decorated,
+        string $module,
+        string $function
+    ) {
+        $this->decorated = $decorated;
+        $this->permissionResolver = $permissionResolver;
+        $this->permissionChecker = $permissionChecker;
+        $this->module = $module;
+        $this->function = $function;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoiceList($value = null)
+    {
+        $restrictedLanguagesCodes = [];
+        $hasAccess = $this->permissionResolver->hasAccess($this->module, $this->function);
+        if (!is_bool($hasAccess)) {
+            $restrictedLanguagesCodes = $this->permissionChecker->getRestrictions($hasAccess, LanguageLimitation::class);
+        }
+
+        $languages = $this->decorated->getChoiceList();
+
+        if (empty($restrictedLanguagesCodes)) {
+            return new ArrayChoiceList($languages, $value);
+        }
+
+        $languages = array_filter($languages, function (Language $language) use ($restrictedLanguagesCodes) {
+            return in_array($language->languageCode, $restrictedLanguagesCodes, true);
+        });
+
+        return new ArrayChoiceList($languages, $value);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadChoicesForValues(array $values, $value = null)
+    {
+        // Optimize
+        $values = array_filter($values);
+        if (empty($values)) {
+            return [];
+        }
+
+        // If no callable is set, values are the same as choices
+        if (null === $value) {
+            return $values;
+        }
+
+        return $this->loadChoiceList($value)->getChoicesForValues($values);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function loadValuesForChoices(array $choices, $value = null)
+    {
+        // Optimize
+        $choices = array_filter($choices);
+        if (empty($choices)) {
+            return [];
+        }
+
+        // If no callable is set, choices are the same as values
+        if (null === $value) {
+            return $choices;
+        }
+
+        return $this->loadChoiceList($value)->getValuesForChoices($choices);
+    }
+}
diff --git a/src/lib/Form/Type/Content/Draft/ContentCreateType.php b/src/lib/Form/Type/Content/Draft/ContentCreateType.php
index 634414ec7a..8a0a007a69 100644
--- a/src/lib/Form/Type/Content/Draft/ContentCreateType.php
+++ b/src/lib/Form/Type/Content/Draft/ContentCreateType.php
@@ -14,21 +14,35 @@
 use EzSystems\EzPlatformAdminUi\Form\Type\ContentType\ContentTypeChoiceType;
 use EzSystems\EzPlatformAdminUi\Form\Type\Language\LanguageChoiceType;
 use Symfony\Component\Form\AbstractType;
+use Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface;
 use Symfony\Component\Form\Extension\Core\Type\SubmitType;
 use Symfony\Component\Form\FormBuilderInterface;
 use Symfony\Component\OptionsResolver\OptionsResolver;
 
 class ContentCreateType extends AbstractType
 {
-    /** @var LanguageService */
+    /** @var \eZ\Publish\API\Repository\LanguageService */
     protected $languageService;
 
+    /** @var \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface */
+    private $contentTypeChoiceLoader;
+
+    /** @var \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface */
+    private $languageChoiceLoader;
+
     /**
-     * @param LanguageService $languageService
+     * @param \eZ\Publish\API\Repository\LanguageService $languageService
+     * @param \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface $contentTypeChoiceLoader
+     * @param \Symfony\Component\Form\ChoiceList\Loader\ChoiceLoaderInterface $languageChoiceLoader
      */
-    public function __construct(LanguageService $languageService)
-    {
+    public function __construct(
+        LanguageService $languageService,
+        ChoiceLoaderInterface $contentTypeChoiceLoader,
+        ChoiceLoaderInterface $languageChoiceLoader
+    ) {
         $this->languageService = $languageService;
+        $this->contentTypeChoiceLoader = $contentTypeChoiceLoader;
+        $this->languageChoiceLoader = $languageChoiceLoader;
     }
 
     public function buildForm(FormBuilderInterface $builder, array $options)
@@ -41,6 +55,7 @@ public function buildForm(FormBuilderInterface $builder, array $options)
                     'label' => false,
                     'multiple' => false,
                     'expanded' => true,
+                    'choice_loader' => $this->contentTypeChoiceLoader,
                 ]
             )
             ->add(
@@ -55,6 +70,7 @@ public function buildForm(FormBuilderInterface $builder, array $options)
                     'label' => false,
                     'multiple' => false,
                     'expanded' => false,
+                    'choice_loader' => $this->languageChoiceLoader,
                 ]
             )
             ->add(
diff --git a/src/lib/Form/Type/ContentType/ContentTypeChoiceType.php b/src/lib/Form/Type/ContentType/ContentTypeChoiceType.php
index 610d3bda7a..39d7dbac1b 100644
--- a/src/lib/Form/Type/ContentType/ContentTypeChoiceType.php
+++ b/src/lib/Form/Type/ContentType/ContentTypeChoiceType.php
@@ -9,8 +9,8 @@
 namespace EzSystems\EzPlatformAdminUi\Form\Type\ContentType;
 
 use eZ\Publish\API\Repository\ContentTypeService;
+use EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader;
 use Symfony\Component\Form\AbstractType;
-use Symfony\Component\Form\ChoiceList\Loader\CallbackChoiceLoader;
 use Symfony\Component\Form\Extension\Core\Type\ChoiceType;
 use Symfony\Component\OptionsResolver\OptionsResolver;
 
@@ -19,15 +19,22 @@
  */
 class ContentTypeChoiceType extends AbstractType
 {
-    /** @var ContentTypeService */
+    /** @var \eZ\Publish\API\Repository\ContentTypeService */
     protected $contentTypeService;
 
+    /** @var \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader */
+    private $contentTypeChoiceLoader;
+
     /**
-     * @param ContentTypeService $contentTypeService
+     * @param \eZ\Publish\API\Repository\ContentTypeService $contentTypeService
+     * @param \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\ContentTypeChoiceLoader $contentTypeChoiceLoader
      */
-    public function __construct(ContentTypeService $contentTypeService)
-    {
+    public function __construct(
+        ContentTypeService $contentTypeService,
+        ContentTypeChoiceLoader $contentTypeChoiceLoader
+    ) {
         $this->contentTypeService = $contentTypeService;
+        $this->contentTypeChoiceLoader = $contentTypeChoiceLoader;
     }
 
     public function getParent()
@@ -39,15 +46,7 @@ public function configureOptions(OptionsResolver $resolver)
     {
         $resolver
             ->setDefaults([
-                'choice_loader' => new CallbackChoiceLoader(function () {
-                    $contentTypes = [];
-                    $contentTypeGroups = $this->contentTypeService->loadContentTypeGroups();
-                    foreach ($contentTypeGroups as $contentTypeGroup) {
-                        $contentTypes[$contentTypeGroup->identifier] = $this->contentTypeService->loadContentTypes($contentTypeGroup);
-                    }
-
-                    return $contentTypes;
-                }),
+                'choice_loader' => $this->contentTypeChoiceLoader,
                 'choice_label' => 'name',
                 'choice_name' => 'identifier',
                 'choice_value' => 'identifier',
diff --git a/src/lib/Form/Type/Language/LanguageChoiceType.php b/src/lib/Form/Type/Language/LanguageChoiceType.php
index d385cc4597..590fd5944e 100644
--- a/src/lib/Form/Type/Language/LanguageChoiceType.php
+++ b/src/lib/Form/Type/Language/LanguageChoiceType.php
@@ -8,9 +8,8 @@
 
 namespace EzSystems\EzPlatformAdminUi\Form\Type\Language;
 
-use eZ\Publish\API\Repository\LanguageService;
+use EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader;
 use Symfony\Component\Form\AbstractType;
-use Symfony\Component\Form\ChoiceList\Loader\CallbackChoiceLoader;
 use Symfony\Component\Form\Extension\Core\Type\ChoiceType;
 use Symfony\Component\OptionsResolver\OptionsResolver;
 
@@ -21,20 +20,15 @@
  */
 class LanguageChoiceType extends AbstractType
 {
-    /** @var LanguageService */
-    protected $languageService;
-
-    /** @var array */
-    protected $siteAccessLanguages;
+    /** @var \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader */
+    private $languageChoiceLoader;
 
     /**
-     * @param LanguageService $languageService
-     * @param array $siteAccessLanguages
+     * @param \EzSystems\EzPlatformAdminUi\Form\Type\ChoiceList\Loader\LanguageChoiceLoader $languageChoiceLoader
      */
-    public function __construct(LanguageService $languageService, array $siteAccessLanguages)
+    public function __construct(LanguageChoiceLoader $languageChoiceLoader)
     {
-        $this->languageService = $languageService;
-        $this->siteAccessLanguages = $siteAccessLanguages;
+        $this->languageChoiceLoader = $languageChoiceLoader;
     }
 
     public function getParent()
@@ -46,27 +40,7 @@ public function configureOptions(OptionsResolver $resolver)
     {
         $resolver
             ->setDefaults([
-                'choice_loader' => new CallbackChoiceLoader(function () {
-                    $saLanguages = [];
-                    $languagesByCode = [];
-
-                    foreach ($this->languageService->loadLanguages() as $language) {
-                        if ($language->enabled) {
-                            $languagesByCode[$language->languageCode] = $language;
-                        }
-                    }
-
-                    foreach ($this->siteAccessLanguages as $languageCode) {
-                        if (!isset($languagesByCode[$languageCode])) {
-                            continue;
-                        }
-
-                        $saLanguages[] = $languagesByCode[$languageCode];
-                        unset($languagesByCode[$languageCode]);
-                    }
-
-                    return array_merge($saLanguages, array_values($languagesByCode));
-                }),
+                'choice_loader' => $this->languageChoiceLoader,
                 'choice_label' => 'name',
                 'choice_name' => 'languageCode',
                 'choice_value' => 'languageCode',
diff --git a/src/lib/Menu/ContentRightSidebarBuilder.php b/src/lib/Menu/ContentRightSidebarBuilder.php
index a68e40149e..70e4168734 100644
--- a/src/lib/Menu/ContentRightSidebarBuilder.php
+++ b/src/lib/Menu/ContentRightSidebarBuilder.php
@@ -22,6 +22,7 @@
 use EzSystems\EzPlatformAdminUi\Specification\ContentIsUser;
 use EzSystems\EzPlatformAdminUi\Specification\Location\HasChildren;
 use EzSystems\EzPlatformAdminUi\Specification\Location\IsRoot;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
 use EzSystems\EzPlatformAdminUiBundle\Templating\Twig\UniversalDiscoveryExtension;
 use EzSystems\EzPlatformAdminUi\Specification\Location\IsWithinCopySubtreeLimit;
 use JMS\TranslationBundle\Model\Message;
@@ -70,6 +71,9 @@ class ContentRightSidebarBuilder extends AbstractBuilder implements TranslationC
     /** @var \eZ\Publish\API\Repository\LocationService */
     private $locationService;
 
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
+
     /**
      * @param \EzSystems\EzPlatformAdminUi\Menu\MenuItemFactory $factory
      * @param \Symfony\Component\EventDispatcher\EventDispatcherInterface $eventDispatcher
@@ -81,6 +85,7 @@ class ContentRightSidebarBuilder extends AbstractBuilder implements TranslationC
      * @param \EzSystems\EzPlatformAdminUiBundle\Templating\Twig\UniversalDiscoveryExtension $udwExtension
      * @param \eZ\Publish\API\Repository\ContentService $contentService
      * @param \eZ\Publish\API\Repository\LocationService $locationService
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
      */
     public function __construct(
         MenuItemFactory $factory,
@@ -92,7 +97,8 @@ public function __construct(
         SearchService $searchService,
         UniversalDiscoveryExtension $udwExtension,
         ContentService $contentService,
-        LocationService $locationService
+        LocationService $locationService,
+        PermissionCheckerInterface $permissionChecker
     ) {
         parent::__construct($factory, $eventDispatcher);
 
@@ -104,6 +110,7 @@ public function __construct(
         $this->udwExtension = $udwExtension;
         $this->contentService = $contentService;
         $this->locationService = $locationService;
+        $this->permissionChecker = $permissionChecker;
     }
 
     /**
@@ -132,8 +139,11 @@ public function createStructure(array $options): ItemInterface
         $content = $options['content'];
         /** @var ItemInterface|ItemInterface[] $menu */
         $menu = $this->factory->createItem('root');
-        $canCreate = $this->permissionResolver->hasAccess('content', 'create')
-            && $contentType->isContainer;
+
+        $hasAccess = $this->permissionResolver->hasAccess('content', 'create');
+        $canCreateInLocation = $this->permissionChecker->canCreateInLocation($location, $hasAccess);
+
+        $canCreate = $canCreateInLocation && $contentType->isContainer;
         $canEdit = $this->permissionResolver->canUser(
             'content',
             'edit',
diff --git a/src/lib/Menu/LeftSidebarBuilder.php b/src/lib/Menu/LeftSidebarBuilder.php
index 2eb02b1094..586749ef76 100644
--- a/src/lib/Menu/LeftSidebarBuilder.php
+++ b/src/lib/Menu/LeftSidebarBuilder.php
@@ -93,7 +93,9 @@ public function createStructure(array $options): ItemInterface
                     'extras' => ['icon' => 'browse'],
                     'attributes' => [
                         'class' => 'btn--udw-browse',
-                        'data-udw-config' => $this->udwExtension->renderUniversalDiscoveryWidgetConfig('single'),
+                        'data-udw-config' => $this->udwExtension->renderUniversalDiscoveryWidgetConfig('single', [
+                            'type' => 'content_create',
+                        ]),
                         'data-starting-location-id' => $this->configResolver->getParameter(
                             'universal_discovery_widget_module.default_location_id'
                         ),
diff --git a/src/lib/Permission/PermissionChecker.php b/src/lib/Permission/PermissionChecker.php
new file mode 100644
index 0000000000..9c4d444137
--- /dev/null
+++ b/src/lib/Permission/PermissionChecker.php
@@ -0,0 +1,239 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\Permission;
+
+use eZ\Publish\API\Repository\PermissionResolver;
+use eZ\Publish\API\Repository\UserService;
+use eZ\Publish\API\Repository\Values\Content\Location;
+use eZ\Publish\API\Repository\Values\User\Limitation\LocationLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\ParentContentTypeLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\ParentDepthLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\ParentOwnerLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\ParentUserGroupLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\SectionLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\SubtreeLimitation;
+use eZ\Publish\API\Repository\Values\User\User;
+
+class PermissionChecker implements PermissionCheckerInterface
+{
+    private const USER_GROUPS_LIMIT = 25;
+
+    /** @var \eZ\Publish\API\Repository\PermissionResolver */
+    private $permissionResolver;
+
+    /** @var \eZ\Publish\API\Repository\UserService */
+    private $userService;
+
+    /** @var array */
+    private $flattenArrayOfLimitations;
+
+    /**
+     * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
+     * @param \eZ\Publish\API\Repository\UserService $userService
+     */
+    public function __construct(
+        PermissionResolver $permissionResolver,
+        UserService $userService
+    ) {
+        $this->permissionResolver = $permissionResolver;
+        $this->userService = $userService;
+    }
+
+    /**
+     * @param $hasAccess
+     * @param string $class
+     *
+     * @return array
+     */
+    public function getRestrictions($hasAccess, string $class): array
+    {
+        $restrictions = [];
+        $oneOfPoliciesHasNoLimitation = false;
+
+        foreach ($this->flattenArrayOfLimitationsForCurrentUser($hasAccess) as $policy => $limitations) {
+            $policyHasLimitation = false;
+            foreach ($limitations as $limitation) {
+                if ($limitation instanceof $class) {
+                    $restrictions[] = $limitation->limitationValues;
+                    $policyHasLimitation = true;
+                }
+            }
+            if (false === $policyHasLimitation) {
+                $oneOfPoliciesHasNoLimitation = true;
+            }
+        }
+
+        if ($oneOfPoliciesHasNoLimitation) {
+            return [];
+        }
+
+        return empty($restrictions) ? $restrictions : array_unique(array_merge(...$restrictions));
+    }
+
+    /**
+     * @param \eZ\Publish\API\Repository\Values\Content\Location $location
+     * @param array|bool $hasAccess
+     *
+     * @return bool
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\NotFoundException
+     * @throws \eZ\Publish\API\Repository\Exceptions\UnauthorizedException
+     */
+    public function canCreateInLocation(Location $location, $hasAccess): bool
+    {
+        if (is_bool($hasAccess)) {
+            return $hasAccess;
+        }
+        $restrictedLocations = $this->getRestrictions($hasAccess, LocationLimitation::class);
+        $canCreateInLocation = empty($restrictedLocations)
+            ? true
+            : \in_array($location->id, array_map('intval', $restrictedLocations), true);
+
+        if (false === $canCreateInLocation) {
+            return false;
+        }
+
+        $restrictedParentContentTypes = $this->getRestrictions($hasAccess, ParentContentTypeLimitation::class);
+        $canCreateInParentContentType = empty($restrictedParentContentTypes)
+            ? true
+            : \in_array($location->contentInfo->contentTypeId, array_map('intval', $restrictedParentContentTypes), true);
+
+        if (false === $canCreateInParentContentType) {
+            return false;
+        }
+
+        $restrictedParentDepths = $this->getRestrictions($hasAccess, ParentDepthLimitation::class);
+        $canCreateInParentDepth = empty($restrictedParentDepths)
+            ? true
+            : \in_array($location->depth, array_map('intval', $restrictedParentDepths), true);
+
+        if (false === $canCreateInParentDepth) {
+            return false;
+        }
+
+        $restrictedParentOwner = $this->getRestrictions($hasAccess, ParentOwnerLimitation::class);
+        $canCreateInParentOwner = empty($restrictedParentOwner)
+            ? true
+            : $location->contentInfo->ownerId === $this->permissionResolver->getCurrentUserReference()->getUserId();
+
+        if (false === $canCreateInParentOwner) {
+            return false;
+        }
+
+        $restrictedSections = $this->getRestrictions($hasAccess, SectionLimitation::class);
+        $canCreateInSection = empty($restrictedSections)
+            ? true
+            : \in_array($location->contentInfo->sectionId, array_map('intval', $restrictedSections), true);
+
+        if (false === $canCreateInSection) {
+            return false;
+        }
+
+        $restrictedParentUserGroups = $this->getRestrictions($hasAccess, ParentUserGroupLimitation::class);
+        $canCreateInParentUserGroup = empty($restrictedParentUserGroups)
+            ? true
+            : $this->hasSameParentUserGroup($location);
+
+        if (false === $canCreateInParentUserGroup) {
+            return false;
+        }
+
+        $restrictedSubtrees = $this->getRestrictions($hasAccess, SubtreeLimitation::class);
+        $canCreateInSubtree = empty($restrictedSubtrees)
+            ? true
+            : !empty(array_filter($restrictedSubtrees, function ($restrictedSubtree) use ($location) {
+                return strpos($location->pathString, $restrictedSubtree) === 0;
+            }));
+
+        if (false === $canCreateInSubtree) {
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * This method should only be used for very specific use cases. It should be used in a content cases
+     * where assignment limitations are not relevant.
+     *
+     * @param array $hasAccess
+     *
+     * @return array
+     */
+    private function flattenArrayOfLimitationsForCurrentUser(array $hasAccess): array
+    {
+        $currentUserId = $this->permissionResolver->getCurrentUserReference()->getUserId();
+
+        if (\is_array($this->flattenArrayOfLimitations[$currentUserId])) {
+            return $this->flattenArrayOfLimitations[$currentUserId];
+        }
+
+        $limitations = [];
+        foreach ($hasAccess as $permissionSet) {
+            if ($permissionSet['limitation'] !== null) {
+                $limitations[] = $permissionSet['limitation'];
+            }
+            /** @var \eZ\Publish\API\Repository\Values\User\Policy $policy */
+            foreach ($permissionSet['policies'] as $policy) {
+                $policyLimitations = $policy->getLimitations();
+                if (!empty($policyLimitations)) {
+                    foreach ($policyLimitations as $policyLimitation) {
+                        $limitations[$policy->id][] = $policyLimitation;
+                    }
+                }
+            }
+        }
+
+        return $this->flattenArrayOfLimitations[$currentUserId] = $limitations;
+    }
+
+    /**
+     * @param \eZ\Publish\API\Repository\Values\Content\Location $location
+     *
+     * @return bool
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\NotFoundException
+     * @throws \eZ\Publish\API\Repository\Exceptions\UnauthorizedException
+     */
+    private function hasSameParentUserGroup(Location $location): bool
+    {
+        $currentUserId = $this->permissionResolver->getCurrentUserReference()->getUserId();
+        $currentUser = $this->userService->loadUser($currentUserId);
+        $currentUserGroups = $this->loadAllUserGroupsIdsOfUser($currentUser);
+
+        $locationOwnerId = $location->contentInfo->ownerId;
+        $locationOwner = $this->userService->loadUser($locationOwnerId);
+        $locationOwnerGroups = $this->loadAllUserGroupsIdsOfUser($locationOwner);
+
+        return !empty(array_intersect($currentUserGroups, $locationOwnerGroups));
+    }
+
+    /**
+     * @param \eZ\Publish\API\Repository\Values\User\User $user
+     *
+     * @return int[]
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\UnauthorizedException
+     */
+    private function loadAllUserGroupsIdsOfUser(User $user): array
+    {
+        $allUserGroups = [];
+        $offset = 0;
+
+        do {
+            $userGroups = $this->userService->loadUserGroupsOfUser($user, $offset, self::USER_GROUPS_LIMIT);
+            foreach ($userGroups as $userGroup) {
+                $allUserGroups[] = $userGroup->contentInfo->id;
+            }
+            $offset += self::USER_GROUPS_LIMIT;
+        } while (\count($userGroups) === self::USER_GROUPS_LIMIT);
+
+        return $allUserGroups;
+    }
+}
diff --git a/src/lib/Permission/PermissionCheckerInterface.php b/src/lib/Permission/PermissionCheckerInterface.php
new file mode 100644
index 0000000000..28e60c3b31
--- /dev/null
+++ b/src/lib/Permission/PermissionCheckerInterface.php
@@ -0,0 +1,28 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+namespace EzSystems\EzPlatformAdminUi\Permission;
+
+use eZ\Publish\API\Repository\Values\Content\Location;
+
+interface PermissionCheckerInterface
+{
+    /**
+     * @param $hasAccess
+     * @param string $class
+     *
+     * @return array
+     */
+    public function getRestrictions($hasAccess, string $class): array;
+
+    /**
+     * @param \eZ\Publish\API\Repository\Values\Content\Location $location
+     * @param array|bool $hasAccess
+     *
+     * @return bool
+     */
+    public function canCreateInLocation(Location $location, $hasAccess): bool;
+}
diff --git a/src/lib/UniversalDiscovery/Event/Subscriber/ContentCreate.php b/src/lib/UniversalDiscovery/Event/Subscriber/ContentCreate.php
new file mode 100644
index 0000000000..3146c8b552
--- /dev/null
+++ b/src/lib/UniversalDiscovery/Event/Subscriber/ContentCreate.php
@@ -0,0 +1,160 @@
+<?php
+
+/**
+ * @copyright Copyright (C) eZ Systems AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace EzSystems\EzPlatformAdminUi\UniversalDiscovery\Event\Subscriber;
+
+use eZ\Publish\API\Repository\ContentTypeService;
+use eZ\Publish\API\Repository\Exceptions\NotFoundException;
+use eZ\Publish\API\Repository\PermissionResolver;
+use eZ\Publish\API\Repository\Values\User\Limitation\ContentTypeLimitation;
+use eZ\Publish\API\Repository\Values\User\Limitation\LanguageLimitation;
+use EzSystems\EzPlatformAdminUi\UniversalDiscovery\Event\ConfigResolveEvent;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+
+class ContentCreate implements EventSubscriberInterface
+{
+    /** @var array */
+    private $restrictedContentTypesIdentifiers;
+
+    /** @var array */
+    private $restrictedLanguagesCodes;
+
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
+
+    /** @var \eZ\Publish\API\Repository\ContentTypeService */
+    private $contentTypeService;
+
+    /**
+     * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
+     * @param \eZ\Publish\API\Repository\ContentTypeService $contentTypeService
+     *
+     * @throws \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException
+     */
+    public function __construct(
+        PermissionResolver $permissionResolver,
+        PermissionCheckerInterface $permissionChecker,
+        ContentTypeService $contentTypeService
+    ) {
+        $this->contentTypeService = $contentTypeService;
+        $this->permissionChecker = $permissionChecker;
+
+        $hasAccess = $permissionResolver->hasAccess('content', 'create');
+        $this->restrictedContentTypesIdentifiers = $this->getRestrictedContentTypesIdentifiers($hasAccess);
+        $this->restrictedLanguagesCodes = $this->getRestrictedLanguagesCodes($hasAccess);
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public static function getSubscribedEvents(): array
+    {
+        return [
+            ConfigResolveEvent::NAME => ['onUdwConfigResolve'],
+        ];
+    }
+
+    /**
+     * @param \EzSystems\EzPlatformAdminUi\UniversalDiscovery\Event\ConfigResolveEvent $event
+     */
+    public function onUdwConfigResolve(ConfigResolveEvent $event): void
+    {
+        $configName = $event->getConfigName();
+        if ('create' !== $configName && 'single' !== $configName) {
+            return;
+        }
+
+        $context = $event->getContext();
+        if (
+            !isset($context['type'])
+            || 'content_create' !== $context['type']
+        ) {
+            return;
+        }
+
+        if ($this->hasContentTypeRestrictions()) {
+            $config = $event->getConfig();
+            $config['content_on_the_fly']['allowed_content_types'] = $this->restrictedContentTypesIdentifiers;
+            $event->setConfig($config);
+        }
+
+        if ($this->hasLanguagesRestrictions()) {
+            $config = $event->getConfig();
+            $config['content_on_the_fly']['allowed_languages'] = $this->restrictedLanguagesCodes;
+            $event->setConfig($config);
+        }
+    }
+
+    /**
+     * @param array|bool $hasAccess
+     *
+     * @return array
+     */
+    private function getRestrictedContentTypesIdentifiers($hasAccess): array
+    {
+        if (!is_array($hasAccess)) {
+            return [];
+        }
+
+        $restrictedContentTypesIds = $this->permissionChecker->getRestrictions($hasAccess, ContentTypeLimitation::class);
+
+        if (empty($restrictedContentTypesIds)) {
+            return [];
+        }
+
+        $restrictedContentTypesIdentifiers = [];
+        foreach ($restrictedContentTypesIds as $restrictedContentTypeId) {
+            // TODO: Change to `contentTypeService->loadContentTypeList($restrictedContentTypesIds)` after #2444 will be merged
+            try {
+                $identifier = $this->contentTypeService->loadContentType($restrictedContentTypeId)->identifier;
+                $restrictedContentTypesIdentifiers[] = $identifier;
+            } catch (NotFoundException $e) {
+            }
+        }
+
+        return $restrictedContentTypesIdentifiers;
+    }
+
+    /**
+     * @return bool
+     */
+    private function hasContentTypeRestrictions(): bool
+    {
+        return !empty($this->restrictedContentTypesIdentifiers);
+    }
+
+    /**
+     * @param $hasAccess
+     *
+     * @return string[]
+     */
+    private function getRestrictedLanguagesCodes($hasAccess): array
+    {
+        if (!\is_array($hasAccess)) {
+            return [];
+        }
+
+        $restrictedLanguagesCodes = $this->permissionChecker->getRestrictions($hasAccess, LanguageLimitation::class);
+
+        if (empty($restrictedLanguagesCodes)) {
+            return [];
+        }
+
+        return $restrictedLanguagesCodes;
+    }
+
+    /**
+     * @return bool
+     */
+    private function hasLanguagesRestrictions(): bool
+    {
+        return !empty($this->restrictedLanguagesCodes);
+    }
+}
diff --git a/src/lib/UniversalDiscovery/Event/Subscriber/SectionAssign.php b/src/lib/UniversalDiscovery/Event/Subscriber/SectionAssign.php
index b10b4a68a9..e322535223 100644
--- a/src/lib/UniversalDiscovery/Event/Subscriber/SectionAssign.php
+++ b/src/lib/UniversalDiscovery/Event/Subscriber/SectionAssign.php
@@ -13,7 +13,7 @@
 use eZ\Publish\API\Repository\PermissionResolver;
 use eZ\Publish\API\Repository\Values\User\Limitation\ContentTypeLimitation;
 use EzSystems\EzPlatformAdminUi\UniversalDiscovery\Event\ConfigResolveEvent;
-use EzSystems\EzPlatformAdminUi\Util\PermissionUtil;
+use EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface;
 use Symfony\Component\EventDispatcher\EventSubscriberInterface;
 
 class SectionAssign implements EventSubscriberInterface
@@ -21,25 +21,25 @@ class SectionAssign implements EventSubscriberInterface
     /** @var array */
     private $restrictedContentTypes;
 
-    /** @var \EzSystems\EzPlatformAdminUi\Util\PermissionUtil */
-    private $permissionUtil;
+    /** @var \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface */
+    private $permissionChecker;
 
     /** @var \eZ\Publish\API\Repository\ContentTypeService */
     private $contentTypeService;
 
     /**
      * @param \eZ\Publish\API\Repository\PermissionResolver $permissionResolver
-     * @param \EzSystems\EzPlatformAdminUi\Util\PermissionUtil $permissionUtil
+     * @param \EzSystems\EzPlatformAdminUi\Permission\PermissionCheckerInterface $permissionChecker
      * @param \eZ\Publish\API\Repository\ContentTypeService $contentTypeService
      *
      * @throws \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException
      */
     public function __construct(
         PermissionResolver $permissionResolver,
-        PermissionUtil $permissionUtil,
+        PermissionCheckerInterface $permissionChecker,
         ContentTypeService $contentTypeService
     ) {
-        $this->permissionUtil = $permissionUtil;
+        $this->permissionChecker = $permissionChecker;
         $this->contentTypeService = $contentTypeService;
         $hasAccess = $permissionResolver->hasAccess('section', 'assign');
         $this->restrictedContentTypes = is_array($hasAccess) ? $this->getRestrictedContentTypes($hasAccess) : [];
@@ -88,19 +88,8 @@ public function onUdwConfigResolve(ConfigResolveEvent $event): void
     private function getRestrictedContentTypes(array $hasAccess): array
     {
         $restrictedContentTypes = [];
-        $restrictedContentTypesIds = [];
+        $restrictedContentTypesIds = $this->permissionChecker->getRestrictions($hasAccess, ContentTypeLimitation::class);
 
-        foreach ($this->permissionUtil->flattenArrayOfLimitations($hasAccess) as $limitation) {
-            if ($limitation instanceof ContentTypeLimitation) {
-                $restrictedContentTypesIds[] = $limitation->limitationValues;
-            }
-        }
-
-        if (empty($restrictedContentTypesIds)) {
-            return $restrictedContentTypes;
-        }
-
-        $restrictedContentTypesIds = array_unique(array_merge(...$restrictedContentTypesIds));
         foreach ($restrictedContentTypesIds as $restrictedContentTypeId) {
             // TODO: Change to `contentTypeService->loadContentTypeList($restrictedContentTypesIds)` after #2444 will be merged
             try {
diff --git a/src/lib/Util/PermissionUtil.php b/src/lib/Util/PermissionUtil.php
deleted file mode 100644
index a6eb20680b..0000000000
--- a/src/lib/Util/PermissionUtil.php
+++ /dev/null
@@ -1,41 +0,0 @@
-<?php
-
-/**
- * @copyright Copyright (C) eZ Systems AS. All rights reserved.
- * @license For full copyright and license information view LICENSE file distributed with this source code.
- */
-declare(strict_types=1);
-
-namespace EzSystems\EzPlatformAdminUi\Util;
-
-class PermissionUtil
-{
-    /**
-     * This method should only be used for very specific use cases. It should be used in a content cases
-     * where assignment limitations are not relevant.
-     *
-     * @param array $hasAccess
-     *
-     * @return array
-     */
-    public function flattenArrayOfLimitations(array $hasAccess): array
-    {
-        $limitations = [];
-        foreach ($hasAccess as $permissionSet) {
-            if ($permissionSet['limitation'] !== null) {
-                $limitations[] = $permissionSet['limitation'];
-            }
-            /** @var \eZ\Publish\API\Repository\Values\User\Policy $policy */
-            foreach ($permissionSet['policies'] as $policy) {
-                $policyLimitations = $policy->getLimitations();
-                if (!empty($policyLimitations)) {
-                    foreach ($policyLimitations as $policyLimitation) {
-                        $limitations[] = $policyLimitation;
-                    }
-                }
-            }
-        }
-
-        return $limitations;
-    }
-}