[Zope] OOP Suggestion: allow local roles to restrict and not only extend user's roles.

[Shane Hathaway]

Philipp Robbel wrote:
> My idea to fully support this OOP design was the following:
> Enable local roles not only to extend the user's roles but also restrict
> them.

All of the effect of local roles is actually encapsulated in 
AccessControl/User.py and you can override it with your own type of user 
folder.  In fact, I'm almost fully convinced that local role management 
ought to occur in user folders, not throughout the system.  I think it 
would be much more manageable.

So my suggestion is that you look into creating your own kind of user 
folder or extend someone else's.

Shane