Content type level security - closes #142