This model, however, would quickly break down as the number of object operations and users grew. Thus, an abstraction is inserted between users and object operations. This abstraction, discussed below, allows users and operations to be generalized. The administrators at each level can define new administrators below their folder, thus passing the work down the hierarchy. Zope user objects provide management of authentication information and the kind of access people have.
Roles provide the linkage between authentication and authorization.
Permissions Permissions represent like operations on objects and provide an organized mechanism for setting access control on objects. However, permissions are specific to objects. Different types of objects can provide different, object-specific permissions. Acquisition Acquisition is the mechanism in Zope for sharing information among objects contained in a folder and its subfolders. The Zope security system uses acquisition to share permission settings, so that access can be controlled from high-level folders.