[Zope] allow access to fileobject depending on role