membership, authorization