Restrict access to content types management by permission