[Zope] permissions check without triggering login