<?xml version="1.0" encoding="utf-8" ?>
<odoo>
    <record id="group_allow_add_implied_from_settings" model="res.groups">
        <field name="name">Allow add implied groups from settings</field>
    </record>
    <record id="not_admin_tenant_rule" model="ir.rule">
        <field name="name">Only admin can edit admin</field>
        <field name="model_id" ref="base.model_res_users" />
        <field name="global" eval="1" />
        <field name="domain_force">[('id', '!=', 1)]</field>
        <field name="perm_read" eval="False" />
        <field name="perm_write" eval="True" />
        <field name="perm_create" eval="True" />
        <field name="perm_unlink" eval="True" />
        <field name="protected" eval="True" />
    </record>
    <record id="res_groups_restricted" model="ir.rule">
        <field name="name">res.groups.restricted</field>
        <field name="model_id" ref="base.model_res_groups" />
        <field
            name="domain_force"
            eval="&quot;['|', ('user_ids','in', [user.id]), ('id', '=', '%s')]&quot; % ref('base.group_no_one')"
        />
        <field name="perm_read" eval="False" />
        <field name="perm_write" eval="True" />
        <field name="perm_create" eval="False" />
        <field name="perm_unlink" eval="True" />
        <field name="protected" eval="True" />
    </record>
</odoo>
