Use Pundit for authorization. Only admin user can delete company. All users except for guests can edit