I don’t think you will achieve that with Permissions. Permissions are hieracial. If you can edit then you can also create. Consider a Supplier Workflow that will trigger an alert on AfterSubmit / Create