Add company permissions to acl