code: def create_items(portal_type=None, uid=None, endpoint=None, **kw):
      
  
      # disable CSRF
      req.disable_csrf_protection()
  
      # destination where to create the content
      container = uid and get_object_by_uid(uid) or None
  
      # extract the data from the request
      records = req.get_request_data()
  
      results = []
      for record in records:
  
          # get the portal_type
          if portal_type is None:
              # try to fetch the portal type out of the request data
              portal_type = record.pop("portal_type", None)
  
          # check if it is allowed to create the portal_type
          if not is_creation_allowed(portal_type):
              fail(401, "Creation of '{}' is not allowed".format(portal_type))
  
          if container is None:
              # find the container for content creation
              container = find_target_container(portal_type, record)
  
          # Check if we have a container and a portal_type
          if not all([container, portal_type]):
              fail(400, "Please provide a container path/uid and portal_type")
  
          # create the object and pass in the record data
          obj = create_object(container, portal_type, **record)
          results.append(obj)
  
      if not results:
          fail(400, "No Objects could be created")
  
      return make_items_for(results, endpoint=endpoint)
docs: create items
  
      1. If the uid is given, get the object and create the content in there
         (assumed that it is folderish)
      2. If the uid is 0, the target folder is assumed the portal.
      3. If there is no uid given, the payload is checked for either a key
          - `parent_uid`  specifies the *uid* of the target folder
          - `parent_path` specifies the *physical path* of the target folder