PLD: restrict org viewing to users with role in org, closes #398