Restricting access to content types by role