zammad/app/policies/controllers/templates_controller_policy.rb

class Controllers::TemplatesControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!(['ticket.agent', 'admin.template'])
end