Scope all queries beneath a tenant id

[caspiano]

A new model Tenant or Organization should be added.
For queries, we can overload queries on the ORM to ensure that the tenant's ID is included.

[stakach]

base this on the User model

belongs_to Authority
secondary_index :authority_id
validates :authority_id, presence: true

then uniqueness checks on models should be scoped to the authority_id (this is an example of that in User model)

ensure_unique :email_digest, scope: [:authority_id, :email_digest] do |authority_id, email_digest|
  {authority_id, email_digest}
end

The classes that should be scoped are:

• zone
• trigger
• control_system
• edge
• broker
• asset
• module

optionally scoped: (authority_id can be nil)

• repository (so we can have drivers shared)
• driver

Things like metadata, trigger instances and settings don't need to be explicitly scoped as they are associated with things that are scoped