fix permissions on company level views

Those views are accessed through the company traversal that give the by
default the view access to all authenticated users.
Here we correct it in activities and expenses views.