minor fix in membership permission