(rename this document at some point)

High-level security concepts in Zope 3
======================================

See the Background document for the background as to what zope 3 is.

Principal

Permission

Object in Context

 -- the main point is we're interested in what permissions a principal needs
    to access an attribute of a particular object.

To help us manage and understand this task for larger systems, we have

Roles

Groups

Grants

Examples of zcml.


ZopeSecurityPolicy

  - walk through exactly what it does
