Objects may be given an __ac_local_roles__ property which may be either a mapping or a callable that returns a mapping from principal id to a list of principals.
This package is modelled closesly on the local role system in Zope/CMF/Plone.
- Plone allowedRolesAndUsers
https://github.com/plone/Products.CMFPlone/blob/master/Products/CMFPlone/CatalogTool.py
- Plone _getAllLocalRole
https://github.com/plone/Products.PlonePAS/blob/master/Products/PlonePAS/pas.py
- CMF allowedRolesAndUsers
http://svn.zope.org/Products.CMFCore/trunk/Products/CMFCore/CatalogTool.py
- CMF _mergedLocalRoles
http://svn.zope.org/Products.CMFCore/trunk/Products/CMFCore/utils.py