def blog_added(ob, event):
    """ handler for IObjectAddedEvent
        here we revoke "sc.blog: Add Blog" permission and acquisition
        this way Blogs couldn't be added inside Blogs or subobjects
        of Blogs.
    """
    ob.manage_permission('sc.blog: Add Blog')
