<?xml version="1.0" encoding="utf-8"?>
<odoo>
<data noupdate="1">

    <record id="group_hr_payroll_user" model="res.groups">
        <field name="name">Officer</field>
        <field name="category_id" ref="base.module_category_hr_payroll"/>
        <field name="implied_ids" eval="[(4, ref('hr.group_hr_user'))]"/>
    </record>

    <record id="group_hr_payroll_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="category_id" ref="base.module_category_hr_payroll"/>
        <field name="implied_ids" eval="[(4, ref('hr_payroll.group_hr_payroll_user'))]"/>
        <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>

    <record id="base.default_user" model="res.users">
        <field name="groups_id" eval="[(4,ref('hr_payroll.group_hr_payroll_manager'))]"/>
    </record>

    <record id="property_rule_employee_payslip" model="ir.rule">
        <field name="name">Employee Payslip</field>
        <field name="model_id" ref="model_hr_payslip"/>
        <field name="domain_force">['|', ('employee_id.user_id', '=', user.id), ('employee_id.department_id.manager_id.user_id', '=', user.id)]</field>
        <field name="groups" eval="[(4,ref('hr_payroll.group_hr_payroll_user'))]"/>
    </record>

</data>
</odoo>

<?xml version="1.0" encoding="utf-8"?>
<odoo>
<data noupdate="1">

    <record id="group_hr_payroll_user" model="res.groups">
        <field name="name">Officer</field>
        <field name="category_id" ref="base.module_category_hr_payroll"/>
        <field name="implied_ids" eval="[(4, ref('hr.group_hr_user'))]"/>
    </record>

    <record id="group_hr_payroll_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="category_id" ref="base.module_category_hr_payroll"/>
        <field name="implied_ids" eval="[(4, ref('hr_payroll.group_hr_payroll_user'))]"/>
        <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>

    <record id="base.default_user" model="res.users">
        <field name="groups_id" eval="[(4,ref('hr_payroll.group_hr_payroll_manager'))]"/>
    </record>

</data>
</odoo>

Remove stupid record rule that became buggy
[FIX] hr_payroll: Remove stupid record rule that became buggy

In saas-12, a stupid record rule authorizes an employee to create a payslip only for him (dafuq)

In saas-13, sine the HR access right splitting, this record rule authorizes an payroll user ti create a payslip only for him (bug). A consequence of this is that the rule is also applied to the payroll manager (bugx2)
