[Zope-CMF] When is a user not a member?

[Chris Withers]

Hello again, I guess people are probably getting bored of my posts by now,
so I'll try and keep it brief :-)

Portal Instances seem to take as their members all Zope users with
appropriate permissions defined in acl_users in or above the portal
instance.
However, portal_membership.listMembers() (and hence .getRoster() ) only list
those in the 'nearest' acl_users.
Which one is right and what are the implications?

This is a hard problem, how should it be solved?

cheers,

Chris