Add circle policy.json and rule circle:template:create

circle/circle/os_policies/circle_policy.json

+{
+  "admin_or_owner": "is_admin:True or (role:admin and is_admin_project:True) or  project_id:%(project_id)s",
+  "default": "rule:admin_or_owner",
+
+  "template:create": ""
+}
\ No newline at end of file

circle/circle/settings/base.py

@@ -561,6 +561,7 @@ POLICY_FILES = {
     'volume': 'cinder_policy.json',
     'image': 'glance_policy.json',
     'network': 'neutron_policy.json',
+    'circle': 'circle_policy.json',
 }
 # Services for which horizon has extra policies are defined
 # in POLICY_DIRS by default.

circle/vm/operations.py

@@ -507,7 +507,7 @@ class SaveAsTemplateOperation(InstanceOperation):
                     "template (and to the networks it uses) will be able to "
                     "start an instance of it.")
     accept_states = ('SHUTOFF', 'ACTIVE')  # TODO: try other states
-    # os_policy_actions = (("compute", "compute:stop"),)
+    os_policy_actions = (("circle", "template:create"),)
 
     @staticmethod
     def _rename(name):