Apply a default filter per relation for a multi tenant app

I’m not sure if I understand well your question, but rom itself won’t help you with anything related to the http layer, because it is not its responsibility and it would be a smell of a bad design breaking a clean architecture. The web interface is at the outermost part of the typical architecture circle, so you have to look it in the other way. You have to find a way to instruct the persistence layer from the request layer (or any other below).