I found a bug in odoo that a normal user who has access to the contacts can edit company information by just going to partner select his won name then there is a link to the company of partner form click on that and edit. If the user changes the address then it will reflect on quotation/so/invoice.
Could anyone suggest how to get rid of this bug?
Not get what you have stated clearly if you feel it as a bug, then report it at: https://github.com/odoo/odoo/issues