rename methods, no perms checks in Membership model