organization & userrelations free visibility

apps/authentication/api/v1/api.py

@@ -256,7 +256,7 @@ class OrganizationViewSet(BaseViewSet, SoftDeleteMixin, ModelViewSet, DynamicSea
 
     def list(self, request, *args, **kwargs):
         """ all organization """
-        queryset = self.get_queryset()
+        queryset = self.get_queryset(visibility_by_org_scope=True)
 
         query = self.filter_query(queryset)
 

apps/authorization/api/v1/api.py

@@ -165,9 +165,9 @@ class UserRelationViewSet(BaseViewSet, SoftDeleteMixin, viewsets.ModelViewSet, D
         role_param = self.request.query_params.get('role')  # noqa
 
         if role_param != '':
-            queryset = self.get_queryset().filter(role_id=int(role_param))
+            queryset = self.get_queryset(visibility_by_org_scope=True).filter(role_id=int(role_param))
         else:
-            queryset = self.get_queryset().order_by('-create_date')
+            queryset = self.get_queryset(visibility_by_org_scope=True).order_by('-create_date')
 
         queryset = self.filter_queryset(queryset)  # noqa