Why does this contributor rule doesn't do what i want?

[amien]

!resource.App.stream.Empty() and

user.@UserType="Contributor" and

resource.App.HasPrivilege("read") and (resource.objectType = "userstate" or  resource.objectType = "sheet") and !user.IsAnonymous()

Resource file : App.Object*

Actions : Create

Context : Only on Hub

The contributor can now create there own sheets. Great, but now i want to add two things which doesn't work:

* The contributor should only be able to use Master Items, not the rest

* The contributor should be able to publish the sheet as a community sheet (also added action = publish which doesn't work)

What do i need to add to the rule?

Thanks in advanced