Veryfing if the user want to update others info

I have two content-types in a relation of 1 to 1, one is the user login info, he can’t change that info, and the other content-type is the info of his company, the problem is, when i’m testing with postman and i successfully log in, i can’t change others people’s company info with their id, even though i shouldn’t be able to do that, i can’t figure out a way to change that in the .js file