closes #6, closes #7 : hierarchical ApplicationTenancy and data tenancy checks.