Users with role set to 'can_add_dtable': False (for example, Guest) can still create bases from Templates

I’ll take a look at permissions tomorrow - this topic as well as this topic.