or is it "because user is viewer, token is viewer"