I feel so validated :-)
I've been poking around Zope again, finally. I was sooo happy when I looked at the Define Permissions panel and found basically the exact same roles-based action-oriented permissions-acquisition design that I cooked up and convinced my customer into using for their CMS I'm building.
It's a good sign that this one-off CMS mirrors the design of a very well designed system like Zope in at least one aspect. :-)
Okay, now I can sleep in peace tonight... ahhh... sleeep.
You can get your own Zope site at http://www.zopesite.com/. Very cool.