isn't that what you're after, though? checking

organization_viewer

will tell you that the public user doesn't have that access via that path, but it does have access via

public_viewer