`$membership->access($operation)` will save us getting the user and group out of the membership, just to test them against some operation.