check membership request permission #20