CSPACE-595 added a test for multi-tenancy. it uses two pre-configured users in ROLE_TEANAT_ADMINISTRATOR to create an account, a role and a permission for a service for each tenant. It then creates (potentially concurrently) dimension object as the newly created user for a tenant, tries to update the other tenant's object and fails successfully, tries to delete the other tenant's object and fails successfully.
test: MultiTenancyTest, all service tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionDocumentHandler.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleUtil.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleDocumentHandler.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageUtils.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityUtils.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountDocumentHandler.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountJpaFilter.java
A services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java