Added missing plone.app.controlpanel zcml import for the permissions to work.