[Zope] newbie : req.AUTHENTICATED_USER.has_permission