Organizations may define an Admin user

[yankedev]

To simplify user management, an organization should be able to define a list of admin users (the first user of an org is org-admin per default).
Select a checkbox to make a user admin of the organization (this operation can only be executed by system admin and other organization admins).
Organization admins are able to reset the password of users in the same organization.

Question: as all org-admin users will get the same role, we should always check that it has this role for the organization he wants to change the data.
How could this be done? Is there a way to define this type of rule in SpringSecurity?

[yankedev]

it is already implemented.
I have not yet been able to test the security that an owner can only modify (reset password) users of its own organization.

but the feature is complete :-D