Manage template access User: Own Templates Administrator sign.template: group_sign_manager: Create and manage templates [(1, '=', 1)] sign.template: group_sign_user: Create templates [(1, '=', 1)] sign.template: group_sign_user: Manage templates ['|', ('authorized_ids', 'in', user.id), '|', ('group_ids', 'in', user.groups_id.ids), ('user_id', '=', user.id)] sign.item: group_sign_manager: Create and manage template items [('template_id.has_sign_requests', '=', False)] sign.item: group_sign_manager: Readonly access to template items [(1, '=', 1)] sign.item: group_sign_user: Read template items ['|', ('template_id.authorized_ids', 'in', user.id), '|', ('template_id.group_ids', 'in', user.groups_id.ids), ('template_id.user_id', '=', user.id)] sign.item: group_sign_user: Create and manage template items ['&', ('template_id.has_sign_requests', '=', False), '|', ('template_id.authorized_ids', 'in', user.id), '|', ('template_id.group_ids', 'in', user.groups_id.ids), ('template_id.user_id', '=', user.id)] sign.request: group_sign_manager: Create and manage sign requests [(1, '=', 1)] sign.request: group_sign_user: Create sign requests [(1, '=', 1)] sign.request: group_sign_user: sender: Manage sign requests [('create_uid', '=', user.id)] sign.request: group_sign_user: signer,follower: Manage sign requests ['|', ('message_partner_ids','in', user.partner_id.ids), ('request_item_ids.partner_id', 'in', user.partner_id.ids)] sign.request.item: group_sign_manager: Create and manage sign request items [(1, '=', 1)] sign.request.item: group_sign_user: sender: Create and manage sign request items [('sign_request_id.create_uid', '=', user.id)] sign.request.item: group_sign_user: follower: Manage sign request items [('sign_request_id.message_partner_ids', 'in', user.partner_id.ids)] sign.request.item: group_sign_user: signer: Read sign request items [('sign_request_id.request_item_ids.partner_id', 'in', user.partner_id.ids)] sign.log: group_sign_user: Read sign logs ['|', ('sign_request_id.message_partner_ids', 'in', user.partner_id.ids), '|', ('sign_request_id.request_item_ids.partner_id', 'in', user.partner_id.ids), ('sign_request_id.create_uid', '=', user.id)] sign.log: group_sign_manager: Read sign logs [(1, '=', 1)]