Add rights on cgscop_timesheet_sheet to my UR only

security/ir.model.access.csv

@@ -9,4 +9,3 @@ access_project_project_cg_manager,access_project_project_cg,model_project_projec
 access_account_analytic_account_ur_manager,access_account_analytic_account_ur,analytic.model_account_analytic_account,cgscop_partner.group_ur_list_modif,1,1,1,1
 access_account_analytic_account_cg_manager,access_account_analytic_account_cg,analytic.model_account_analytic_account,cgscop_partner.group_cg_administrator,1,1,1,1
 access_cgscop_timesheet_sheet_user,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_hr_timesheet_user,1,1,1,1
-access_cgscop_timesheet_sheet_manager,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_timesheet_manager,1,1,1,1

security/security_rules.xml

@@ -51,5 +51,31 @@
             <field eval="True" name="global"/>
             <field name="active" eval="False"/>
         </record>
+
+        <record id="account.account_analytic_line_rule_billing_user" model="ir.rule">
+            <field name="name">account.analytic.line.billing.user</field>
+            <field name="model_id" ref="model_account_analytic_line"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+            <field name="active" eval="False"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_ur" model="ir.rule">
+            <field name="name">Feuilles de temps de mon UR</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field eval="True" name="global"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_administrator_ur" model="ir.rule">
+            <field name="name">Feuilles de temps administrator</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[(1,'=',1)]</field>
+            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
+            <field eval="True" name="global"/>
+        </record>
     </data>
 </odoo>