Membrane is a set of PluggableAuthService (PAS) plug-ins that
for the user-related behaviour and data (authentication, properties,
roles, groups, etc.) to be obtained from content within a Plone
It does not actually provide a full member implementation, it is
intended to be a set of tools from which a full implementation can be
constructed. It is meant to be flexible and pluggable, and
adapt to different deployment scenarios. It is not meant to be
configured through-the-web-only, but to be adapted by filesystem code.
Membrane tries to take a step backwards and re-think some of the Plone membership-handling. We have tried to make it as simple as possible, so that grasping and extending it is simple. Hopefully, simplicity should also make it easier to make sure it is secure.
For information about the "why?" of Membrane, and some policies for helping out, please see MANIFESTO.txt.