i think changing it to `when logged in user does not belong to the company`