Description
Pluggable authentication service (PAS) provides easy way to customize your user, permission authentication behavior.
Ready or half-baked plug-ins:
http://svn.plone.org/svn/collective/PASPlugins/
Lots of examples for dynamic group configuration.