Tower Server: user visibility rule [('user_ids', 'in', [user.id])] Tower Server: Manager Read (if follower or in manager_ids) ['|', ('user_ids', 'in', [user.id]), ('manager_ids', 'in', [user.id])] Tower Server: Manager Write & Create (if in manager_ids) [('manager_ids', 'in', [user.id])] Tower Server: Manager Delete (if in manager_ids and creator) [('manager_ids', 'in', [user.id]), ('create_uid', '=', user.id)] Tower Server: root visibility rule [(1, '=', 1)]