fixes #6172 - give hidden user access to all orgs