brian.r.brinegar.1 writes:

I would like to restrict the users of a Zope install from creating some types of objects such as External Methods and Filesystem Views. If I disable these permissions in the root the user can enable them in any subfolder that they own. If I remove Owner privileges in the root the user can grant the necessary local roles to do whatever they want. I'm missing something, there has to be a way to limit what users can and cannot create while still allowing them to adjust permissions on objects they own. Creation of objects is controlled by specific permissions. Just disable them for the respective roles as needed.

Dieter