Hi Bruno,
Organization-based permissions are supported with anything you want. It relies on you setting a header to tell Orbeon Forms about the user, the organizations she is in, and the her organization roles. You can look at this as an extension to the current header-based permissions.
And we have a special integration for Liferay that sets this header for you, based on users and organizations defined in Liferay, which makes it really simple for those who use Liferay. But you can set the header yourself, or at least you will once we have documentation for this :).
Alex
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet