[WIP] Stop viewers being able to create releases

A viewer can currently create a new release (which they shouldn't be able to do).

/cc @zendesk/samson
Let is only scoped to instance methods, while you're calling this in the class context here. You may need to write out the test manually because I don't think fixtures are loaded until runtime.