dashboard: allow creating templates only with lease operators

circle/dashboard/forms.py

@@ -612,6 +612,9 @@ class TemplateForm(forms.ModelForm):
             self.instance.ram_size = 512
             self.instance.num_cores = 2
 
+        self.fields["lease"].queryset = Lease.get_objects_with_level(
+            "operator", self.user)
+
     def clean_owner(self):
         if self.instance.pk is not None:
             return User.objects.get(pk=self.instance.owner.pk)

circle/vm/models/common.py

@@ -77,6 +77,7 @@ class Lease(AclBase):
     """
     ACL_LEVELS = (
         ('user', _('user')),          # use this lease
+        ('operator', _('operator')),  # share this lease
         ('owner', _('owner')),        # change this lease
     )
     name = CharField(max_length=100, unique=True,