[Zope] has_permission for arbitrary user