It is often useful to delegate the day-to-day management of a Zope Folder to another person without giving that person complete control over that Folder. The fine-grained permissions defined by Zope objects make it easy to delegate as much or as little control as your situation requires.
Let's assume that our company has a Product, Public Relation and Research department, and that we are responsible for our company intranet site. Since the site needs to be organized by department, we first need to create a Folder for each department3. We create an empty User Folder in each as part of the creation process, as was described in "Creating Folders". The Folder layout is as shown in the navigation frame shown in Figure 9 .
It would be inefficient for each department to have to go through us to make changes to their areas, so we will delegate most (but not all) Folder management abilities to a selected user in each department. To do this, we create a new role, "Admin", in the top-level folder, which will be usable by all subobjects contained in the site. First, we view the top-level folder by clicking on its entry in the navigation frame and then click on the Security tab to display the Security view. At the bottom of the Security view is a small form to add a role. We use this form to add the Admin role. After entering the new role name and clicking the "Add Role" button, the Security screen is updated to include a new column for the Admin role and to provide an additional form for deleting user-defined roles. Finally, we add permissions for the role Admin. We want our department caretaker to be able to do all of the things a manager does, except change the security setting of the of other folders. To do this, we give the Admin role all permissions except "Change permissions" and "Manage users."
Next, we will go into the Research Folder, and create a new user, Phil, in its User Folder. This will be the user who is going to manage the day-to-day activities of the Folder. We will assign this user the "Admin" role as shown in Figure 15 . By repeating this process for the Public Relations and Products Folders, each department can now take care of its own part of the intranet