access deny edit, show for not belong to companies