Add permission to check for user making changes to be in the same company as the receiver of actions

[Ken Mbira]