[Zope] role, user defined roles, and inclusion

[Florent Guillaume]

Chris Withers  <chris at simplistix.co.uk> wrote:
> > (FWIW in CPSUserFolder we chose to return Authenticated as well as
> > Anonymous to be consistent.)
> 
> In what context? Providing both Authenticated and Anonymous on the same 
> user at the same time seems bizarre ;-)

When doing user.getRoles(). Because as Tres said more clearly than me,
every user can do what the Anonymous role can, so it's just being
consistent to express that in user.getRoles(). IMHO.

Florent

-- 
Florent Guillaume, Nuxeo (Paris, France)   CTO, Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   fg at nuxeo.com