diff --git a/addons/mail/security/mail_security.xml b/addons/mail/security/mail_security.xml
index 0cb01ebbfc0..f800bb7ad3e 100644
--- a/addons/mail/security/mail_security.xml
+++ b/addons/mail/security/mail_security.xml
@@ -129,28 +129,6 @@
             <field name="perm_unlink" eval="True"/>
         </record>
 
-        <record id="res_users_settings_rule_admin" model="ir.rule">
-            <field name="name">Administrators can access all User Settings.</field>
-            <field name="model_id" ref="model_res_users_settings"/>
-            <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
-            <field name="domain_force">[(1, '=', 1)]</field>
-            <field name="perm_read" eval="True"/>
-            <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="True"/>
-            <field name="perm_unlink" eval="True"/>
-        </record>
-
-        <record id="res_users_settings_rule_user" model="ir.rule">
-            <field name="name">res.users.settings: access their own entries</field>
-            <field name="model_id" ref="model_res_users_settings"/>
-            <field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
-            <field name="domain_force">[('user_id', '=', user.id)]</field>
-            <field name="perm_read" eval="True"/>
-            <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="True"/>
-            <field name="perm_unlink" eval="True"/>
-        </record>
-
         <record id="res_users_settings_volumes_rule_user" model="ir.rule">
             <field name="name">res.users.settings.volumes: access their own entries</field>
             <field name="model_id" ref="model_res_users_settings_volumes"/>
diff --git a/odoo/addons/base/security/base_security.xml b/odoo/addons/base/security/base_security.xml
index 700bbc527fb..9099f835b15 100644
--- a/odoo/addons/base/security/base_security.xml
+++ b/odoo/addons/base/security/base_security.xml
@@ -158,6 +158,29 @@
             <field name="domain_force">[('create_uid', '=', user.id)]</field>
         </record>
 
+        <!-- Record Rule For User settings -->
+        <record id="res_users_settings_rule_admin" model="ir.rule">
+            <field name="name">Administrators can access all User Settings.</field>
+            <field name="model_id" ref="model_res_users_settings"/>
+            <field name="groups" eval="[Command.link(ref('base.group_system'))]"/>
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+
+        <record id="res_users_settings_rule_user" model="ir.rule">
+            <field name="name">res.users.settings: access their own entries</field>
+            <field name="model_id" ref="model_res_users_settings"/>
+            <field name="groups" eval="[Command.link(ref('base.group_user'))]"/>
+            <field name="domain_force">[('user_id', '=', user.id)]</field>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+
         <!-- rules for API token -->
         <record id="api_key_public" model="ir.rule">
             <field name="name">Public users can't interact with keys at all</field>