limit organisations list to own organisation except when system admin