[Zope] permission, roles, security question