There can be many Organisations
A User belongs to an Organisation
An App belongs to an Organisation
An Env belongs to an App
When creating an Env an App is chosen
What kind of validates can I write to check that the App belongs to the same Organisation as the current_user does?