Added doc strings and changed permissions a bit.

lib/python/AccessControl/User.py

 """Access control package"""
 
-__version__='$Revision: 1.59 $'[11:-2]
+__version__='$Revision: 1.60 $'[11:-2]
 
 import Globals, App.Undo, socket, regex
 from Globals import HTMLFile, MessageDialog, Persistent, PersistentMapping
@@ -219,7 +219,7 @@ class BasicUserFolder(Implicit, Persistent, Navigation, Tabs, RoleManager,
       'manage_UndoForm']),
     ('Undo changes',       ['manage_undo_transactions']),
     ('Change permissions', ['manage_access']),
-    ('Manage users',       ['manage_users']),
+    ('Manage users',       ['manage_users','getUserNames','getUser','getUsers']),
     )
 
 
@@ -515,7 +515,12 @@ class BasicUserFolder(Implicit, Persistent, Navigation, Tabs, RoleManager,
 
 
 class UserFolder(BasicUserFolder):
-    """Standard Principia UserFolder object"""
+    """Standard Principia UserFolder object
+
+    A UserFolder holds User objects which contain information
+    about users including name, password domain, and roles.
+    UserFolders function chiefly to contol access by authenticating
+    users and binding them to a collection of roles."""
 
     meta_type='User Folder'
     id       ='acl_users'