title: CRUD only for the organization the user belongs to
body: <p><strong>Background</strong>
  I'm building a application where all users belongs to a Organization. I only want the user to be able to Create/Read/Update/Delete records in the Organization they belong to.</p>
  
  <p>I'm using sails, but I'm looking for Connect/Express-based, or a standalone  answer as sails-permissions node module is unmaintained.</p>
  
  <p><strong>Question</strong>
  How can one implement a authorization that allow CRUD only for the organization the user belongs to?</p>