fix uploading TCV csv
Add permission checking for company