[Zope] Hiding ZMI Pages

[Thomas Rampelberg]

Is there a way to keep users from being able to see any of the
management pages? For example, return a 404 error if someone tries to
go to http://zopesite/manage or http://zopesite/object/manage.

In a similar vein, how would you go about keeping users from executing
python scripts or external methods by just typing in the path to that
object (http://zopesite/pythonscript) yet still let the pages that use
those methods to access them?