[FIX] email_template: security, email_template no rights for externals