Added permissions checking on company and employee status