has_permission_on :field_values, :to => [:create, :destroy, :delete, :update] do
  if_attribute :submission => { :company => is { user.company } }
end