diff --git a/__manifest__.py b/__manifest__.py
index 1c3044f42aea02568292df5116f744bcc7606c84..c5d179261ef5ec00950048e22b2dde7e27e68fec 100644
--- a/__manifest__.py
+++ b/__manifest__.py
@@ -15,6 +15,7 @@
         "partner_company_type",
     ],
     "data": [
+        "security/security_rules.xml",
         "security/ir.model.access.csv",
         "views/res_partner_cooperative.xml",
         "views/scop_config_views.xml",
diff --git a/security/security_rules.xml b/security/security_rules.xml
new file mode 100644
index 0000000000000000000000000000000000000000..36c2d785561bc01b64ef2ef7b12074fc33fef979
--- /dev/null
+++ b/security/security_rules.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0"?>
+<!-- Copyright 2019 Le Filament
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+
+<odoo>
+
+    <data noupdate="1">
+
+        <record id="base.res_company_rule_employee" model="ir.rule">
+            <field name="name">company rule employee</field>
+            <field name="model_id" ref="model_res_company"/>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field name="domain_force">[('id','child_of',[user.company_id.id])]</field>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_unlink" eval="False"/>
+        </record>
+    </data>
+</odoo>