[Zope] ZClass security : a solution

['seb bacon']

* Bowyer, Alex <BowyerA@logica.com> [001129 22:21]:
<snip>
> Essentially what we are doing is saying "If you want to View this object,
> you have to have the Manage Properties permission"
> 
> There are probably better ways, but if it ain't broke don't fix it.
> 
> I don't understand why you have to choose a permission for each permission
> (which is a very confusing concept). It would be much better if you could
> choose a role to say e.g. "If you want to View this object, you have to have
> the UAAdmin Role"

yep, that's what I figured it had to mean.  however, I tried it and it
didn't work.  This is probably because I messed up where the user was
defined or something, but the whole thing took so long even to try out
that I gave up.  Are we the only ones who find it counter-intuitive?!
or at the very least, downright unpleasant... perhaps it's just
ZClasses.  It usually is :) I gave up and did it in a product eventually.

seb