File: User read via related server (user_ids) [('server_id.user_ids', 'in', [user.id])] File: Manager write & create via related server (manager_ids) [('server_id.manager_ids', 'in', [user.id])] File: Manager unlink via related server (manager_ids) and record creator [ ('server_id.manager_ids', 'in', [user.id]), ('create_uid', '=', user.id) ] File: Root Unrestricted Access [(1, '=', 1)]