I have users that are assigned to an organisation. An organisation can have many users.
I would like users within the same organisation to be able edit entries (in this case projects) created by a "parent" user in that organisation.
I could allow users to edit other users entries, and code into the template a check if they are not in the project's organisation then dont allow them to edit it, but this is not fool proof because someone could change the hidden project ID fields in the HTML and therefore could save an entry for another organisation.
Anyone have any ideas how best to accomplish the above?