An architect designs access control for a multi-tenant Pega app. Each user belongs to one organization; cases must be visible only to users in the case's organization, even if they have permission to the case type. Which Pega construct enforces this?
