A user without any rights on Time Off will be able to see the application, create his own holidays and manage the requests of the users he's manager of. 10 Time Off Responsible Officer: Manage all requests Administrator Time Off base.group_user read [('employee_id.user_id', '=', user.id)] Time Off base.group_user create/write [ '|', '&', ('employee_id.user_id', '=', user.id), ('state', 'not in', ['validate', 'validate1']), '&', ('validation_type', 'in', ['manager', 'both', 'no_validation']), ('employee_id.leave_manager_id', '=', user.id), ] Time Off base.group_user unlink [('employee_id.user_id', '=', user.id), ('state', 'in', ['confirm', 'validate1'])] Time Off Responsible read [ ('employee_id.leave_manager_id', '=', user.id), ] Time Off Responsible create/write [ '|', '&', ('employee_id.user_id', '=', user.id), ('state', '!=', 'validate'), ('employee_id.leave_manager_id', '=', user.id), ] Time Off All Approver read [(1, '=', 1)] Time Off All Approver create/write [ '|', '&', ('employee_id.user_id', '=', user.id), ('state', '!=', 'validate'), '|', ('employee_id.user_id', '!=', user.id), ('employee_id.user_id', '=', False) ] Time Off Administrator [(1, '=', 1)] Time Off: multi company global rule [('company_id', 'in', company_ids)] Time Off: multi company global rule [ '|', ('employee_id', '=', False), ('employee_id.company_id', 'in', company_ids), ('holiday_status_id.company_id', 'in', company_ids + [False]) ] Allocations: employee: read own [ '|', ('employee_id.leave_manager_id', '=', user.id), ('employee_id.user_id', '=', user.id), ] Allocations: base.group_user create/write [ ('holiday_status_id.requires_allocation', '=', 'yes'), ('holiday_status_id.employee_requests', '=', 'yes'), '|', ('employee_id.user_id', '=', user.id), '&', ('validation_type', '=', 'hr'), ('employee_id.leave_manager_id', '=', user.id), ] Allocations: see all time off: read all [(1, '=', 1)] Allocations base.group_user unlink [('employee_id.user_id', '=', user.id), ('state', '=', 'draft')] Allocations: holiday user: create/write [ '|', '&', ('employee_id.user_id', '=', user.id), ('state', '!=', 'validate'), '|', ('employee_id.user_id', '!=', user.id), ('employee_id.user_id', '=', False) ] Allocations: administrator: no limit [(1, '=', 1)] Time Off Resources: Approver [(1,'=',1)] Time Off Resources: All Approver [(1,'=',1)] Time Off multi company rule [('company_id', 'in', company_ids + [False])] Accrual plan multi company rule [('company_id', 'in', company_ids + [False])] Mandatory Day: multi company rule [('company_id', 'in', company_ids + [False])] Time Off Report Calendar: multi company global rule [('company_id', 'in', company_ids + [False])] Time Off Report: multi company global rule [('company_id', 'in', company_ids + [False])] Time Off Summary / Report: Internal User [('has_department_manager_access', '=', True)] Time Off Summary / Report: All Approver [(1, '=', 1)]