fix(rbac): forbiden grant create-ownership-object privilege to user

fix(rbac): forbiden grant create-ownership-object privilege to user #43164