[Zope] fine grained, dynamic permissions based on attribute values