diff --git a/security/security_rules.xml b/security/security_rules.xml
index 246074be7ed6240439c28fc4c49636aecb4a0b4a..7a6b6382aefdac34edf78143f6ed7a7d0807b58f 100644
--- a/security/security_rules.xml
+++ b/security/security_rules.xml
@@ -21,6 +21,14 @@
             <field eval="True" name="global"/>
         </record>
 
+        <record id="ur_month_timesheet_rule_ur" model="ir.rule">
+            <field name="name">ur month timesheet rule per ur</field>
+            <field name="model_id" ref="model_ur_month_timesheet"/>
+            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field eval="True" name="global"/>
+        </record>
+
         <record id="project_rule_ur" model="ir.rule">
             <field name="name">project rule per ur</field>
             <field name="model_id" ref="project.model_project_project"/>
diff --git a/views/ur_month_timesheet.xml b/views/ur_month_timesheet.xml
index cc2eb3f3aad283a1e7207dd01ba060883ad7664a..f759073a8aa2698ceed97f7fb543edb3f8885a8e 100644
--- a/views/ur_month_timesheet.xml
+++ b/views/ur_month_timesheet.xml
@@ -13,6 +13,7 @@
                     <field name="month" required="1"/>
                     <field name="working_time" required="1"/>
                     <field name="ur_id" options="{'no_open': True, 'no_create': True}" readonly="1"/>
+                    <field name="company_id" groups="base.group_no_one" options="{'no_open': True, 'no_create': True}"/>
                 </tree>
             </field>
         </record>