Create an authorization policy

curl --request POST \
  --url https://api.smokeball.com/policies \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json-patch+json' \
  --header 'x-api-key: <api-key>' \
  --data '{
  "principalId": "a7922e80-f833-48f0-8250-c00df1ebbc16",
  "resourceId": "matters/54171794-5ca3-472b-889a-c03538d8c89a",
  "rules": [
    {
      "principalId": "a7922e80-f833-48f0-8250-c00df1ebbc16",
      "resourceId": "matters/69406c65-309d-4e35-a636-ad145e64770a",
      "operation": "Access",
      "type": 0
    }
  ]
}'

{
  "id": "<string>",
  "href": "<string>",
  "relation": "<string>",
  "method": "GET"
}