[Zope] question about local roles