Restrict a catalog object to a domain

[ab-smith]

Can be useful for threats and reference controls and in some cases even for custom frameworks

[whoo]

The same question may apply to users.
A user from one domain should not be able to view users from another domain.