check template permission non-superadmin user