We are trying to have one service desk portal that can serve multiple customer organizations, but different organizations should not be allowed to see issues that were submitted by someone in another organization. We need that rule to hold even if a customer tries to visit an issue they shouldn't be able to see by editing the URL. Is such a thing possible?