membership and authorization