* add tests for api user orgs * add permission for admin to list user's orgs even he is a private user of org