do not allow users without organization access get viewer status

@steved555