Ah alright. What about being able to see the user object of the requesting user? If they don't have any organizations associated with them then there would be no relation to themselves.