[FIX] email_template: security, email_template no rights for externals
[FIX] resource: security, resource not readable by externals