Modified package-show authorization logic (custom state, no organization)
Reviewed condition in logic.auth.get
Merge with fix-custom-state-package-authz