Users can only access their own evaluations [('user_id', '=', user.id), ('state', '!=', 'draft')] Managers can only access their evaluations [('manager_ids', '=', user.id)] Template group can access all related evaluations [('template_id.group_id.users', '=', user.id)]