Improved node management.

- List node by node types
- fixed the trash/restore/delete workflow
Added messaging module to send message to cms users (by email for now).
Added early protection for cache, export and import functionalities.

modules/admin/handler/cms_admin_import_handler.e

@@ -41,11 +41,15 @@ feature -- Execution
 			s: STRING
 			f: CMS_FORM
 		do
-			create {GENERIC_VIEW_CMS_RESPONSE} l_response.make (req, res, api)
-			f := importation_web_form (l_response)
-			create s.make_empty
-			f.append_to_html (l_response.wsf_theme, s)
-			l_response.set_main_content (s)
+			if api.has_permission ("admin import") then
+				create {GENERIC_VIEW_CMS_RESPONSE} l_response.make (req, res, api)
+				f := importation_web_form (l_response)
+				create s.make_empty
+				f.append_to_html (l_response.wsf_theme, s)
+				l_response.set_main_content (s)
+			else
+				create {FORBIDDEN_ERROR_CMS_RESPONSE} l_response.make (req, res, api)
+			end
 			l_response.execute
 		end
 
@@ -57,43 +61,48 @@ feature -- Execution
 			l_importation: CMS_IMPORT_CONTEXT
 			p: PATH
 		do
-			create {GENERIC_VIEW_CMS_RESPONSE} l_response.make (req, res, api)
-			f := importation_web_form (l_response)
-			f.process (l_response)
-			if
-				attached f.last_data as fd and then
-				fd.is_valid
-			then
-				if attached fd.string_item ("op") as l_op and then l_op.same_string (text_import_all_data) then
-					if attached fd.string_item ("folder") as l_folder then
-						create p.make_from_string (l_folder)
-						create l_importation.make (api.site_location.extended (import_folder_name).extended (l_folder))
-						if l_importation.location_exists then
-							l_response.add_notice_message ("Import all data (if permitted)!")
-							api.hooks.invoke_import_from (Void, l_importation, l_response)
-							create s.make_empty
-							across
-								l_importation.logs as ic
-							loop
-								s.append (ic.item)
-								s.append ("<br/>")
-								s.append_character ('%N')
+			if api.has_permission ("admin import") then
+				create {GENERIC_VIEW_CMS_RESPONSE} l_response.make (req, res, api)
+				f := importation_web_form (l_response)
+				f.process (l_response)
+				if
+					attached f.last_data as fd and then
+					fd.is_valid
+				then
+					if attached fd.string_item ("op") as l_op and then l_op.same_string (text_import_all_data) then
+						if attached fd.string_item ("folder") as l_folder then
+							create p.make_from_string (l_folder)
+							create l_importation.make (api.site_location.extended (import_folder_name).extended (l_folder))
+							if l_importation.location_exists then
+								l_response.add_notice_message ("Import all data (if permitted)!")
+								api.hooks.invoke_import_from (Void, l_importation, l_response)
+								create s.make_empty
+								across
+									l_importation.logs as ic
+								loop
+									s.append (ic.item)
+									s.append ("<br/>")
+									s.append_character ('%N')
+								end
+								l_response.add_notice_message (s)
+							else
+								l_response.add_error_message ("Specified import folder is not found!")
+								fd.report_invalid_field ("folder", "Folder not found!")
 							end
-							l_response.add_notice_message (s)
 						else
-							l_response.add_error_message ("Specified import folder is not found!")
-							fd.report_invalid_field ("folder", "Folder not found!")
+							fd.report_error ("Invalid form data!")
 						end
 					else
 						fd.report_error ("Invalid form data!")
 					end
-				else
-					fd.report_error ("Invalid form data!")
 				end
+				create s.make_empty
+				f.append_to_html (l_response.wsf_theme, s)
+				l_response.set_main_content (s)
+			else
+				create {FORBIDDEN_ERROR_CMS_RESPONSE} l_response.make (req, res, api)
 			end
-			create s.make_empty
-			f.append_to_html (l_response.wsf_theme, s)
-			l_response.set_main_content (s)
+
 			l_response.execute
 		end