user can edit the permissions for a membership
obsolete specs deleted