proxy: correct release permission error message

Author: ndbroadbent

internal/gateway/proxy/helpers.go

@@ -171,7 +171,9 @@ func forbiddenMessage(resource rbac.Resource, action rbac.Action) string {
 		}
 	case rbac.ResourceRelease:
 		switch action {
-		case rbac.ActionCreate, rbac.ActionPromote:
+		case rbac.ActionCreate:
+			return "You don't have permission to create releases."
+		case rbac.ActionPromote:
 			return "You don't have permission to promote releases."
 		}
 	}

internal/integration/integration_test.go

@@ -684,7 +684,8 @@ func testProxyE2EUnauthorized(t *testing.T, s *TestServers) {
 		require.Error(t, err, "ops should be blocked from setting env vars")
 		assert.True(
 			t,
-			strings.Contains(string(output), "You don't have permission to promote releases.") ||
+			strings.Contains(string(output), "You don't have permission to create releases.") ||
+				strings.Contains(string(output), "You don't have permission to promote releases.") ||
 				strings.Contains(string(output), "MFA"),
 			"should be blocked: %s",
 			output,