[Zope] How to test for a user having a permission?