Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1643375

Description of problem:

All resources should support scoping to organizations/locations. Some may remain in single org (such as host or content related resources), some may only support org and not locations, but there should be no untaxed resources (such as architectures, puppet classes, operating systems, ...). Some resource may inherit scope from parent resource, e.g. puppet class should inherit it from puppet environment.

There can be some exceptions such as Settings or Auth sources, where scoping does not make sense.

Version-Release number of selected component (if applicable):

How reproducible:

100%

Steps to Reproduce:
1. changing the organization has no effect on untaxed resources such as architecture, puppet class, operating system
2. all such resources should support scoping

Actual results:

100% tenant isolation can't be achieved

Expected results:

100% tenant isolation can be achieved

Additional info: