Namespaces validity must be checked at the earliest stage when the rename command arrives, before initializing any coordinator. The renameIsAllowedOnNS is supposed to do that, but needs to be enriched or replaced with a call to userAllowedCreateNS .