Only allow the user to edit the org they're currently viewing, and only if they're a member of it

[Powersource]

This is already limited in the ui but not in the api

Can look here for inspiration https://github.com/Edgeryders-Participio/realities/pull/119/files

And right now everyone is a member of every org so checking the membership is less of a priority but we should at least make sure that people can't add edges from one org to another

[Powersource]

a.k.a. "complex auth"

[Powersource]

To give this any point, we need to stop just adding everyone that views an org to it as a member, and to start with have the org have an admin that can add people as members. and the best way to do that is to do ParticipioLabs/plato-core#6 (comment) which i'm going to now