fix user's actions on domain/org/name-of-organization/dashboard

On the organization's dashboard, User's actions should check whether the permissions of logged-in user, rather than the permissions of organization.