Can you elaborate on what the Server Code would do and how it would relate to the database ACL?

Thanks!

I'm building an application which will be used by multiple Companies. Each Company will have multiple users, each with their own login credentials (username / password). What is the best way to apply security so users will only be able to see their Company's data. The data for each Company will be s...