old_contents: from pyramid.security import Allow
  from pyramid.security import Deny
  from adhocracy_core.authorization import IRootACMExtension
  from adhocracy_core.interfaces import IResource
  
  
  # flake8: noqa
  
  
  def root_acm_extension_adapter(root: IResource) -> dict:
      """Adpater to extend the `root_acm`."""
      acm = \
          {'principals':                                   ['everyone', 'authenticated', 'participant', 'moderator',  'creator', 'initiator', 'admin'],
           'permissions': [['create_user',                   Deny,        None,            None,          None,         None,      None,        Allow],
                           ['view',                          Deny,        Allow,           Allow,         Allow,        Allow,     Allow,       Allow],
                           ]}
      return acm
  
  
  def includeme(config):
      config.registry.registerAdapter(root_acm_extension_adapter,
                                      (IResource,),
                                      IRootACMExtension)
  
new_contents: from pyramid.security import Allow
  from pyramid.security import Deny
  from adhocracy_core.authorization import IRootACMExtension
  from adhocracy_core.interfaces import IResource
  
  
  # flake8: noqa
  
  
  def root_acm_extension_adapter(root: IResource) -> dict:
      """Adpater to extend the `root_acm`."""
      acm = \
          {'principals':                                   ['everyone', 'authenticated', 'participant', 'moderator',  'creator', 'initiator', 'admin'],
           'permissions': [['create_user',                   Deny,        None,            None,          None,         None,      None,        Allow],
                           ]}
      return acm
  
  
  def includeme(config):
      config.registry.registerAdapter(root_acm_extension_adapter,
                                      (IResource,),
                                      IRootACMExtension)
  
subject: remove global view permission, use private workflow instead