Modified package-show authorization logic (custom state, no organization)