'Force visibility field.
If the tenant is not admin insert an extra
"and <visibility_field>=<tenant\'s project_id>" clause to the query.'

def _force_visibility(self, visibility_field):

    authorized_project = rbac.get_limited_to_project(pecan.request.headers)
    is_admin = (authorized_project is None)
    if (not is_admin):
        self._restrict_to_project(authorized_project, visibility_field)
        self._check_cross_project_references(authorized_project, visibility_field)
