Use CHECK constraint for user_id+org_id.