[Zope] accessing users by role