oca-technical/odoo-bringout-oca-hr-hr_course/hr_course/security/course_security.xml

<?xml version="1.0" encoding="utf-8" ?>
<odoo noupdate="1">
    <record model="ir.rule" id="hr_employee_course_rule">
        <field name="name">hr.employee.course.rule</field>
        <field name="model_id" ref="model_hr_course_schedule" />
        <field
            name="domain_force"
        >[('attendant_ids', 'in', user.employee_ids.ids)]</field>
        <field name="groups" eval="[(4, ref('base.group_user'))]" />
        <field name="global" eval="False" />
    </record>
    <record model="ir.rule" id="hr_employee_course_manager_rule">
        <field name="name">hr.employee.course.rule</field>
        <field name="model_id" ref="model_hr_course_schedule" />
        <field name="domain_force">[(1, '=', 1)]</field>
        <field name="groups" eval="[(4, ref('hr.group_hr_manager'))]" />
        <field name="global" eval="False" />
    </record>
    <record model="ir.rule" id="hr_employee_course_attendee_rule">
        <field name="name">hr.employee.attendee.course.rule</field>
        <field name="model_id" ref="model_hr_course_attendee" />
        <field
            name="domain_force"
        >[('employee_id', 'in', user.employee_ids.ids)]</field>
        <field name="groups" eval="[(4, ref('base.group_user'))]" />
        <field name="global" eval="False" />
    </record>
    <record model="ir.rule" id="hr_employee_course_attendee_manager_rule">
        <field name="name">hr.employee.attendee.course.rule</field>
        <field name="model_id" ref="model_hr_course_attendee" />
        <field name="domain_force">[(1, '=', 1)]</field>
        <field name="groups" eval="[(4, ref('hr.group_hr_manager'))]" />
        <field name="global" eval="False" />
    </record>
</odoo>