Stop viewers being able to create releases

A viewer can currently create a new release (which they shouldn't be able to do).

/cc @zendesk/samson