fix: grant limited-org unit read access to authenticated non-members (#38871)