Mail.group: access only public and joined groups ['|', '|', ('public', '=', 'public'), ('message_follower_ids', 'in', [user.partner_id.id]), '&', ('public','=','groups'), ('group_public_id','in', [g.id for g in user.groups_id])] mail.followers: read and write its own entries [('partner_id', '=', user.partner_id.id)] mail.followers: read and write others entries [] mail.notification: read and write its own entries [('partner_id', '=', user.partner_id.id)]