[Zope] Determining permissions in a Product