--- a/src/pyams_security/zmi/notification.py	Thu Oct 08 09:30:56 2015 +0200
+++ b/src/pyams_security/zmi/notification.py	Thu Oct 08 09:31:45 2015 +0200
@@ -20,6 +20,7 @@
 from pyams_security.interfaces.notification import INotificationSettings
 from pyams_security.zmi.interfaces import ISecurityManagerMenu
 from pyams_skin.layer import IPyAMSLayer
+from pyams_utils.interfaces import VIEW_SYSTEM_PERMISSION, MANAGE_SYSTEM_PERMISSION
 from pyams_zmi.layer import IAdminLayer
 from zope.component.interfaces import ISite
 
@@ -38,7 +39,7 @@
 
 
 @viewlet_config(name='notifications.menu', context=ISite, layer=IAdminLayer, manager=ISecurityManagerMenu,
-                permission='system.view', weight=2)
+                permission=VIEW_SYSTEM_PERMISSION, weight=2)
 class SecurityManagerNotificationsMenuItem(MenuItem):
     """Notifications properties menu item"""
 
@@ -51,7 +52,8 @@
         return resource_url(manager, self.request, self.url)
 
 
-@pagelet_config(name='notifications.html', context=ISecurityManager, layer=IPyAMSLayer, permission='system.view')
+@pagelet_config(name='notifications.html', context=ISecurityManager, layer=IPyAMSLayer,
+                permission=VIEW_SYSTEM_PERMISSION)
 class SecurityManagerNotificationsEditForm(AdminDialogEditForm):
     """Security manager notifications edit form"""
 
@@ -63,6 +65,7 @@
 
     fields = field.Fields(INotificationSettings)
     ajax_handler = 'notifications.json'
+    edit_permission = MANAGE_SYSTEM_PERMISSION
 
     def getContent(self):
         return query_utility(ISecurityManager)
@@ -73,6 +76,6 @@
 
 
 @view_config(name='notifications.json', context=ISecurityManager, request_type=IPyAMSLayer,
-             permission='system.manage', renderer='json', xhr=True)
+             permission=MANAGE_SYSTEM_PERMISSION, renderer='json', xhr=True)
 class SecurityManagerNotificationsAJAXEditForm(AJAXEditForm, SecurityManagerNotificationsEditForm):
     """Security manager notifications edit form, AJAX view"""