How to limit user access to the contacts and leads to a specific company only?

In the ERPNext CRM - the user permission limit to the specific company is working, but in Frappe CRM, it’s not working. Can anyone help? In Frappe CRM, all the contacts are visible even if the user permission is set to a specific company.