This can't be done. Create permission is done at a project level, not issue type.
There are some workarounds involving the Behaviours module in ScriptRunner, or javascript tricks, but they're inconsistent and won't completely block a user from creating the "wrong" issue type.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.