[Zope3-dev] Re: a note on groups and roles

[Jeremy Hylton]

>>>>> "FG" == Florent Guillaume <fg@nuxeo.com> writes:

  FG> Yes, this is a crucial point that bears repeating:

  FG> - UserGroups are groups of users.

  FG> - Roles are really groups of permissions.

Sure.  We can collect permissions into sets of permissions.  The set
should still be called a permission.  We can collect principals into
sets of principals, called groups.  A group is still a principal.

Jeremy