[Zope3-dev] a note on groups and roles

[Lennart Regebro]

Martijn Faassen wrote:
> I imagine a Zope 3 version would be doable without too much difficulty. 
> A service that determines group membership for a principal (in
> particular requests) seems to be a reasonable approach that in my experience 
> is pretty pluggable, but perhaps there's something better..

No, that's good. But even more funkily, you need a different service to 
determine what that group membership means when it comes to roles. :)
This, however, is easily made in the service you need for munging roles, 
so that you can make local roles blacklists, and similar stuff.