change ability requirement

app/services/auth/container_registry_authentication_service.rb

@@ -104,7 +104,7 @@ module Auth
       when 'push'
         build_can_push?(requested_project) || user_can_push?(requested_project)
       when '*'
-        requested_project == project || can?(current_user, :create_container_image, requested_project)
+        requested_project == project || can?(current_user, :admin_container_image, requested_project)
       else
         false
       end