I am stuck

I am creating a DB for Doctors to use:

1. The doctor fills out a medical gas order form that is sent to a company.
   
2. When the company receive the order he/she login to the DB and issue a ticket number.
   The problem I am having is I want the ticket number only be seen by the user it belongs to.
   Example:
   Doctor X orders C02
   
   Company Y issues a ticket # to Doctor X
   
   When Doctor X logs in again and checks the ticket DB only Doctor X ticket # will show
   I thought by using the security settings (user can see and edit their own data only) and assigning the company "Username & Investigator" each user will only see their information. But instead only the company can view what was typed in to the ticket DB.
   What am I doing wrong.. I have the company set as Admin (because I get a session expired error setting them at anything else besides User or Admin)
   I have the Doctors set at User and the Company and Myself set as Admin. I would rather have the company set at something other then Admin but the error occurs.
   For more detail on the session error view my question in the forum no one has answered that question yet.
   L