LPS 50662 Company admin is able to edit users on other instances.

The changes affect the codes in line 1023-1025 : 

if (isCompanyAdminImpl(companyId)) {
				return true;
			}

The companyid should be the one of company where the resource is, rather than the one of company of the user who performs the action to another user.

So in the original logic, the method will return TRUE as long as the user who performing actions is the admin of its own company 

Also see line 991: long companyId = user.getCompanyId();

So the company admin is able to edit users on other instances. 

Now after the changes, the companyId is changed to the one of company of resource not the action performer's. So the user has to the admin of the company of the resource in order to get TRUE.