AZ706: The policy doesn't allow this share

The share asked for isn't one the policy declares: the relation isn't shared with that kind of subject (say, a team where only users may be given it), the role isn't one of the object's, or a role would grant a permission roles can't grant. Change the call, or the policy's relation.

Reported to the app, by the authz.* functions and the policy's rules: the code is in the error's HINT (rowfence help AZ709), and the SDKs' errors carry it as code.