[Zope] ZClass Define Permissions confusion

[Ron Bickers]

After having read the Zope Book Security chapter and various other security
howtos, I understand better how permissions apply in ZClass methods and
property sheets.  However, I'm still confused about a couple things.

1) What is affected by each of the 'Define Permissions' settings in the
ZClasses main screen?  I created a new permission and assigned it to
different things in the list, but the only one that seems to do as I might
expect is the 'Create class instances'.  I can't figure out what the others
do.

2) I have a ZClass that, upon creation of a new instance, creates an Image
object in the new instance.  Everything works as I would expect, but I'm not
sure how (or if) I can define permissions to that object in the ZClass.
More specifically, I have to give Image create/change/delete access in the
container Folder where the ZClass instance is in order for the user to be
able to modify the image inside the ZClass object.  Is there a better way
using the ZClass permissions?

Does this make sense?  I understand pretty well the permission system
outside of ZClasses, it's just inside them that's giving me a headache.

_______________________

Ron Bickers
Logic Etc, Inc.
rbickers@logicetc.com