[Zope] can't use filter to check permission?