Feels like the `access_limited` boolean edition attribute should be renamed to something like `access_limited_to_organisation_only` to make its meaning more explicit now our permissions model is that much more complex.