since we're just adding them as a member, the permission may still
return false.