tra_backend/gym/security/security.xml

<odoo>

    <!-- Menu Visible Group-->
    <record id="group_menu_visible" model="res.groups">
        <field name="name">Menu Visible</field>
    </record>

    <!-- Member Group-->
    <record id="group_gym_member" model="res.groups">
        <field name="name">Member</field>
    </record>

    <!-- Trainer Group-->
    <record id="group_gym_trainer" model="res.groups">
        <field name="name">Trainer</field>
        <field name="implied_ids" eval="[
                    (4, ref('project.group_project_user')),
                    (4, ref('base.group_user'))]"/>
    </record>

    <!-- Operator Group-->
    <record id="group_gym_operator" model="res.groups">
        <field name="name">Operator</field>
        <field name="implied_ids" eval="[
                    (4, ref('hr.group_hr_user')),
                    (4, ref('account.group_account_user')),
                    (4, ref('sales_team.group_sale_salesman_all_leads')),
                    (4, ref('project.group_project_manager'))]"/>
    </record>

    <!-- Manager Group-->
    <record id="group_gym_manager" model="res.groups">
        <field name="name">Gym Manager</field>
        <field name="implied_ids" eval="[
                    (4, ref('hr.group_hr_manager')),
                    (4, ref('sales_team.group_sale_manager')),
                    (4, ref('account.group_account_manager')),
                    (4, ref('base.group_system')),
                    (4, ref('group_gym_operator')),
                    (4, ref('project.group_project_manager'))]"/>
        <field name="users" eval="[(4, ref('base.user_admin'))]"/>
    </record>

    <!-- Rule for Member viewing his Tasks-->
    <record id="rule_project_task_member" model="ir.rule">
        <field name="name">Rule for Member viewing his Tasks</field>
        <field name="model_id" ref="project.model_project_task"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member')),(4, ref('project.group_project_user'))]"/>
        <field name="domain_force">[('user_id','=',user.id)]</field>
    </record>

    <!-- Rule for Member viewing his Projects-->
    <record id="rule_project_project_member" model="ir.rule">
        <field name="name">Rule for Member viewing his Projects</field>
        <field name="model_id" ref="project.model_project_project"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member'))]"/>
        <field name="domain_force">[('partner_id','=',user.partner_id.id)]</field>
    </record>

    <!--Disable the rule for Visible by all employees and set to Visible by following customers
      -->
    <record id="project.project_public_members_rule" model="ir.rule">
        <field name='active' eval='False'/>
    </record>

    <!-- Rule for Member viewing his Partner Record-->
    <record id="rule_res_partner_member" model="ir.rule">
        <field name="name">Rule for Member viewing his Record</field>
        <field name="model_id" ref="base.model_res_partner"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member'))]"/>
        <field name="domain_force">[('id','=',user.partner_id.id)]</field>
    </record>

    <!-- Rule for Manager viewing all Partner Record-->
    <record id="rule_res_partner_manager" model="ir.rule">
        <field name="name">Rule for Manager viewing all Record</field>
        <field name="model_id" ref="base.model_res_partner"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_operator')),(4, ref('gym.group_gym_manager'))]"/>
        <field name="domain_force">[(1,'=',1)]</field>
    </record>

    <!-- Rule for Member viewing his User Record-->
    <record id="rule_res_users_member" model="ir.rule">
        <field name="name">Rule for Member viewing his User Record</field>
        <field name="model_id" ref="base.model_res_users"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member'))]"/>
        <field name="domain_force">[('id','=',user.id)]</field>
    </record>

    <!-- Rule for Member viewing his Membership-->
    <record id="rule_membership_member" model="ir.rule">
        <field name="name">Rule for Member viewing his Membership</field>
        <field name="model_id" ref="membership.model_membership_membership_line"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member'))]"/>
        <field name="domain_force">[('partner','=',user.partner_id.id)]</field>
    </record>

    <!-- Rule for Trainer viewing his record only-->
    <record id="rule_hr_employee_trainer" model="ir.rule">
        <field name="name">Rule for Trainer viewing his Record</field>
        <field name="model_id" ref="hr.model_hr_employee"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_trainer'))]"/>
        <field name="domain_force">[('user_id','=',user.id)]</field>
    </record>

    <!-- Rule for Trainer viewing his Bookings only-->
    <record id="rule_trainer_booking" model="ir.rule">
        <field name="name">Rule for Trainer viewing his Bookings</field>
        <field name="model_id" ref="calendar.model_calendar_event"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_trainer'))]"/>
        <field name="domain_force">[('trainer_id.user_id','=',user.id)]</field>
    </record>

    <record id="calendar.calendar_event_rule_employee" model="ir.rule">
        <field ref="calendar.model_calendar_event" name="model_id"/>
        <field name="name">All Calendar Event for employees</field>
        <field name="domain_force">[(1,'=',1)]</field>
        <field eval="[(4,ref('base.group_user'))]" name="groups"/>
        <field name='active' eval='False'/>
    </record>

    <!-- Rule for Member viewing his Measurement history-->
    <record id="rule_measurement_history" model="ir.rule">
        <field name="name">Rule for viewing his Measurement history</field>
        <field name="model_id" ref="gym.model_body_measurement"/>
        <field name="groups" eval="[(4, ref('gym.group_gym_member'))]"/>
        <field name="domain_force">[('partner_id','=',user.partner_id.id)]</field>
    </record>

</odoo>