[Zope] Aquisition, UserFolder and security