you're saying "check for the

viewer_only

of the user" rather than the user as a whole