[Zope] how can I enforce my own Delete permission

[robert]

Hi all,

I defined my own permission to delete an object like so:
  security.declareProtected( 'Delete ZehnderRequests', 'manage_beforeDelete=
' )
  def manage_beforeDelete(self, item, container):
    "just here to enforce permisson"
    if not=20
self.portal_membership.getAuthenticatedMember().has_permission('Delete=20
ZehnderRequests', self):
      raise BeforeDeleteException

in the class definition I declare=20
  security.setPermissionDefault('Delete ZehnderRequests', ['Manager', 'Owne=
r'=20
]

at the end of the class definition I call
InitializeClass( CMFZehnderRequest )

now my problem:

every user has the permission set altough only manager should have it.

what am I doing wrong here ?

thanks for any typ.
Robert
=2D-=20
mit freundlichen Gr=FCssen

Robert Rottermann
www.redCOR.ch