added permissions to company model