I've often wondered about this: Authenticated vs Member. Member is
often treated and being equivalent to authenticated: if you can
authenticate then you are a member.
They certainly aren't in PAS and I don't know of any other place
where they are treated equivalently. If other third-party application
code treats them equivalently then that is a mistake in that code.
Zope-PAS mailing list