in Zope 2.13, the CMF permission declarations have been moved to CMFCore. this means that on Zope 2.13 CMFCore 2.2.2 is a minimum dependency, but I'm not sure how to declare that