replaced orgUser check with existing org_user scope