Hello guys, I'm working on making an app that would require multi-tenancy. The app would have organisations (or groups of people) register and have admins that would make announcements and members of the organisation would be allowed to view only. I need to enable CRUD into Post model from admins of all organisations(dynamically as more organisations are expected to register later). What would be the best way to secure the API such that any users may not make a Post if they're not an admin of any group(or organisation)?
Thanks in advance