It is often useful to delegate the day-to-day management of a Zope Folder to another person without giving that person complete control over that Folder. The fine-grained permissions defined by Zope objects make it easy to delegate as much or as little control as your situation requires.
Our company has a Product, Public Relation (News) and Research department, and that Stan are responsible for our company intranet site. It would be inefficient for each department to have to go through us to make changes to their areas, so Stan will delegate most (but not all) Folder management abilities to a selected user in each department.
To do this, Stan create a new role, "Admin", in the top-level folder, which will be usable by all subobjects contained in the site.
Finally, Stan adds permissions for the role Admin. Stan wants the department caretaker to be able to do all of the things a manager does, except change the security setting of the of other folders. To do this, Stan gives the Admin role all permissions except "Change permissions" and "Manage users."
Next, Stan will go into the Research Folder, and create a new user, Phil, in its User Folder. This will be the user who is going to manage the day-to-day activities of the Folder. Stan will assign this user the "Admin" role as shown in Figure 15 . By repeating this process for the Public Relations and Products Folders, each department can now take care of its own section of the intranet.
