<configure xmlns="http://namespaces.zope.org/zope">

  <include package="zope.app.securitypolicy" file="meta.zcml"/>

 <grant
     permission="zope.Foo"
     role="zope.Bar" />

 <grant
     permission="zope.Foo"
     principal="zope.Blah" />

 <grant
     role="zope.Bar"
     principal="zope.Blah" />

 
</configure>
