Unauthenticated user can access, create, update, delete template

Description

Normally only administrator of access the exporter template setting, but other user can idor attack leads to: create new template, update, delete and set default template for any projects.