Authorization filter owner = current_user
The new rights system in Foreman 1.5 is missing an ability to match the host owner with the current user logged in.
A possible syntax could be:
owner = current_user
owner_id = current_user_id
This way an abstract role for a user able to manage just his own hosts is possible (or his own hosts in addition to other hosts)