Access providers in own companies only [('company_id', 'in', company_ids)] Access own transactions only ['|', ('partner_id', '=', False), ('partner_id', '=', user.partner_id.id)] Access transactions in own companies only [('company_id', 'in', company_ids)] Users can access only their own tokens [('partner_id', '=', user.partner_id.id)] Access tokens in own companies only [('company_id', 'in', company_ids)]