fixed bug where company id was string
finished the MVC for permissions with most functionality, still need to do payments permissions and default values