oca-workflow-process/odoo-bringout-oca-purchase-workflow-purchase_security/purchase_security/readme/CONFIGURATION.rst

To use this module you need to add the users whose access you want to restrict
to the "Purchases / User (own orders)" group

You can also assign a Purchase Manager by adding him to the
"Purchases / Administrator" group