Comment 5 for bug 161629

my problem with _listAllowedRolesAndUsers() is that
>getattr(eo, '_proxy_roles', None)
returns a empty tuple if there is no proxy_role. Thus,
>if proxy_roles is not None:
will always match. So in the end _listAllowedRolesAndUsers() returns
['Anonymous','user:xxx'] even for managers.