in terms of what i'm actually doing, I have a user and an organization. the user can be in multiple organizations. when I get a response atm, I'm getting their permissions on resources across all orgs -- so I wanted to filter out the response to just respond with the data for the org they're currently sessioned into