title: The requested operation cannot be completed due to security restrictions
body: <p>I have created new add-on as like as survey add-on. Module consist 3 level of groups,</p>
  
  <ol>
  <li>Head Manager(admin)</li>
  <li>Manager</li>
  <li>User</li>
  </ol>
  
  <p>If i am logged in as a manager and print the report, i am getting below warning,</p>
  
  <pre><code>"AccessError: ('AccessError', u'The requested operation cannot be completed due to security restrictions.
  Please contact your system administrator.\n\n(Document type: res.partner, Operation: read)') "
  </code></pre>
  
  <p>My rules are:</p>
  
  <h2>Manager:</h2>
  
  <pre><code>&lt;record model="res.groups" id="base.group_survey_manager"&gt;
  &lt;field name="name"&gt;Custom Survey  Manager&lt;/field&gt;
  &lt;field name="implied_ids" eval="[(4, ref('base.group_survey_user'))]"/&gt;
  &lt;field name="users" eval="[(4, ref('base.user_root'))]"/&gt;
  &lt;/record&gt;
  </code></pre>
  
  <hr>
  
  <pre><code>&lt;record id="project_survey_manager_access" model="ir.rule"&gt;
  &lt;field name="name"&gt;Survey Manager access rights&lt;/field&gt;
  &lt;field name="model_id" ref="custom_survey.model_custom_project_survey"/&gt;
  &lt;field name="domain_force"&gt;[(1, '=', 1)]&lt;/field&gt;
  &lt;field name="groups" eval="[(4, ref('base.group_survey_manager'))]"/&gt;
  &lt;field eval="1" name="perm_unlink"/&gt;
  &lt;field eval="1" name="perm_write"/&gt;
  &lt;field eval="1" name="perm_read"/&gt;
  &lt;field eval="1" name="perm_create"/&gt;
  &lt;/record&gt;
  </code></pre>
  
  <h2>Partner Form Security:</h2>
  
  <pre><code>&lt;record id="partner_list_access" model="ir.rule"&gt;
          &lt;field name="name"&gt;Access to the manager to list related partners&lt;/field&gt;
          &lt;field name="model_id" ref="base.model_res_partner"/&gt;
          &lt;field name="domain_force"&gt;[('create_uid', '=', user.id)]&lt;/field&gt;            
          &lt;field name="groups" eval="[(4, ref('base.group_survey_manager'))]"/&gt;
      &lt;/record&gt;
  </code></pre>
  
  <p>If the manager is logged-in, i would like to list the partner who is created by the current manager. That's why i added the partner rule.</p>
  
  <p>How to solve this issue?</p>