docs: def assert_create_update_delete_permission(request):
      """Access only by subjects with Create/Update/Delete permission and by trusted
      infrastructure (CNs)."""
      if not has_create_update_delete_permission(request):
          raise d1_common.types.exceptions.NotAuthorized(
              0,
              'Access allowed only for subjects with Create/Update/Delete '
              'permission. active_subjects="{}"'.format(format_active_subjects(request)),
          )