The main "hacky" point for me is point is that I need to track the user to company relation twice (user -> company and company -> user) in my approach.