diff --git a/addons/website_sale/security/website_sale.xml b/addons/website_sale/security/website_sale.xml
index 71b4e5f7787..b7dead9e7ce 100644
--- a/addons/website_sale/security/website_sale.xml
+++ b/addons/website_sale/security/website_sale.xml
@@ -25,7 +25,7 @@
     <record id="sale_order_personal_rule_public" model="ir.rule">
         <field name="name">Public Personal Orders</field>
         <field ref="model_sale_order" name="model_id"/>
-        <field name="domain_force">[('state','=','draft'), ('website_session_id','!=',False), ('website_session_id','!=',session.get('website_session_id'))]</field>
+        <field name="domain_force">[('state','=','draft'), ('website_session_id','!=',False), ('website_session_id','=',session.get('website_session_id'))]</field>
         <field name="groups" eval="[(4, ref('base.group_public'))]"/>
         <field name="perm_read" eval="True"/>
         <field name="perm_write" eval="False"/>
@@ -35,7 +35,7 @@
     <record id="sale_order_lines_personal_rule_public" model="ir.rule">
         <field name="name">Public Personal Order lines</field>
         <field ref="model_sale_order_line" name="model_id"/>
-        <field name="domain_force">[('state','=','draft'), ('order_id.website_session_id','!=',False), ('order_id.website_session_id','!=',session.get('website_session_id'))]</field>
+        <field name="domain_force">[('state','=','draft'), ('order_id.website_session_id','!=',False), ('order_id.website_session_id','=',session.get('website_session_id'))]</field>
         <field name="groups" eval="[(4, ref('base.group_public'))]"/>
         <field name="perm_read" eval="True"/>
         <field name="perm_write" eval="False"/>