# permission checking needed since setting the permission
        # in zcml doesn't seem to work
        mtool = getToolByName(self.context, 'portal_membership')
        mem = mtool.getAuthenticatedMember()
        if mem:
            if not checkPermission('cmf.ManagePortal', mem):
                return 'permission denied'
        else:
            return 'permission denied'