====================
plone.portlets to-do
====================

  o Security

    - Determine what security declarations need to go in configure.zcml

    - The restrictions on getAddablePortletTypes() is superficial - if you
      construct the right URL, the adding view will accept it.

  o Design

      -> blacklist specific portlets?
        - this requires assignments to have ids that are unique among all
           acquired portlets