hI,
sorry for the delay in response,
maybe that user still has checked the "can manage contact" checkbox.
this allows the user to edit companies and contacts.
or if the user is still an administrator, then it is allowed to edit company data too.
greetings