[one-users] about restricted attributes in ACLs

[Andreas Calvo]

As per redmine issue http://dev.opennebula.org/issues/1159 , it seems
that only oneadmin templates are not being checked.
In my scenario, users should be able to create their own templates (or
copy from oneadmin's) and fire up instances accessing CONTEXT/FILES.

I've granted:
   15     @101     --N------     *     u---
   22     @101     -H-------     *     -m--
   23     @101     V--I-T---  @101     umac
   25     @101     V--I-T---     *     ---c

But when a user creates it's own template and tries to start it, it
complains about restricted attributes in CONTEXT/FILES.

Is it correct to do it that way?

Thanks