[Zope] permission settings do not work like expected