Incorrect policy request for Zones dashboard

Currently, default policy for 'create_recordset' is '(role:admin and system_scope:all) and ('SECONDARY':%(zone_type)s)' . This rule is scoped to single zone and needs to pass 'zone_type' in policy request target. But for now, only single request without any payload is passed. It leads to 'allowed' response for every zone if policy file is absent, and to 'not allowed' for every zone if default policy file deployed correctly.