diff --git a/account_banking_mandate/migrations/13.0.1.0.0/noupdate_changes.xml b/account_banking_mandate/migrations/13.0.1.0.0/noupdate_changes.xml
new file mode 100644
index 000000000..07c15c830
--- /dev/null
+++ b/account_banking_mandate/migrations/13.0.1.0.0/noupdate_changes.xml
@@ -0,0 +1,8 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<odoo>
+    <record id="account_banking_mandate_rule" model="ir.rule">
+        <field
+            name="domain_force"
+        >['|',('company_id','=',False),('company_id','in',company_ids)]</field>
+    </record>
+</odoo>
diff --git a/account_banking_mandate/migrations/13.0.1.0.0/post-migration.py b/account_banking_mandate/migrations/13.0.1.0.0/post-migration.py
new file mode 100644
index 000000000..256dde771
--- /dev/null
+++ b/account_banking_mandate/migrations/13.0.1.0.0/post-migration.py
@@ -0,0 +1,11 @@
+# Copyright 2020 Tecnativa - Pedro M. Baeza
+# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
+
+from openupgradelib import openupgrade  # pylint: disable=W7936
+
+
+@openupgrade.migrate()
+def migrate(env, version):
+    openupgrade.load_data(
+        env.cr, "account_banking_mandate", "migrations/13.0.1.0.0/noupdate_changes.xml"
+    )
diff --git a/account_banking_mandate/readme/CONTRIBUTORS.rst b/account_banking_mandate/readme/CONTRIBUTORS.rst
index c175ca726..32c61ff9f 100644
--- a/account_banking_mandate/readme/CONTRIBUTORS.rst
+++ b/account_banking_mandate/readme/CONTRIBUTORS.rst
@@ -6,3 +6,4 @@
 * Cédric Pigeon <cedric.pigeon@acsone.eu>
 * Carlos Dauden <carlos.dauden@tecnativa.com>
 * Marçal Isern <marsal.isern@qubiq.es>
+* Andrea Stirpe <a.stirpe@onestein.nl>
diff --git a/account_banking_mandate/security/mandate_security.xml b/account_banking_mandate/security/mandate_security.xml
index 6a568c552..ca9aef65b 100644
--- a/account_banking_mandate/security/mandate_security.xml
+++ b/account_banking_mandate/security/mandate_security.xml
@@ -9,7 +9,7 @@
         <field name="model_id" ref="model_account_banking_mandate" />
         <field
             name="domain_force"
-        >['|', ('company_id', '=', False), ('company_id', 'child_of', [user.company_id.id])]</field>
+        >['|', ('company_id', '=', False), ('company_id', 'in', company_ids)]</field>
         <field name="perm_read" eval="True" />
         <field name="perm_write" eval="False" />
         <field name="perm_unlink" eval="True" />