fixes #1646, #3103 - enable cloning for templates, and add read-only options

You can usually avoid duplicating this by doing:

<pre>
def action_permission
  case params[:action]
  when 'clone'
    :view
  else
    super
  end
end
</pre>