[Zope3-dev] Re: a note on groups and roles

[Steve Alexander]

Florent Guillaume wrote:

> - Permissions, groups of permissions (which are still permissions),

One important thing about permissions is that an attribute of an object 
is protected by a permission.

I can't think of any use-case where an attribute of an object needs to 
be protected by a group of permissions.

I think that being able to say "an attribute of an object is protected 
by a single non-composite permission" will help in both simplifying and 
speeding up security checks at runtime.

--
Steve Alexander