note that if you did write the company for each member as they were added, then this would become

permission read = member + company->admin