do not allow users without organization access get viewer status

@steved555 
Can we have a date or SHA?

Cannot view, but also cannot log in at all.