edit user and company permissions