[Zope] non-root managers can remove products

Maybe this is how it's supposed to work, but I'm not sure. root a acl_users bob, role manager Now goto http://yourserver.com/a/Control_Panel/manage_main. Log in as bob. The page is displayed, and some of the options work, like you can remove products. Is this a bug or a misunderstanding on my part? -Randy