Removed the OPA policy's default create.

deployment/default-policies/dataauthz.rego

@@ -38,7 +38,7 @@ check_errors[{"id": id, "message": "User is not authorized to create or update r
 }
 
 check_errors[{"id": id, "message": "The user is not authorized to perform this action", "reason": "Access denied", "code": "403"}] {
-    input.operation == ["create", "update", "purge", "delete"][_]
+    input.operation == ["update", "purge", "delete"][_]
     owners := {o | o := input.records[x].acls.owners[_]}
     count(owners & permissionSet) == 0
     root_user == false