Created approve for invoices, added permissions to users but not yet
using them in approve function. The database is in sync and in step
Now using the permissiond created in the previous commit to ensure only
allowed employees of a certain company can approve invoices