protect rendered_vendor_selector
refactoring: rename get_vendor to get_nearest_vendor
fix get_allowed_vendors to work with Zope roots acl_users admin user too
add customer selector, be more verbose in vendor and customer vocabs