project owners can mess with memberships