Hi there, I'm looking for a proper record rule for the following case:

User can access his own entry in contacts & user can acces his companies' entry in contacts & user can access his own user profile WITH the functions to change the language and password.

This is what I currently have:

['|', ('type', '!=', 'private'), ('type', '=', False), ('user_ids','in', user.id)]

This user is able to see just his entry in contacts BUT can't properly open the form view on click (...not allowed to access res\.partner\.\.\.record:Administrator\)\ and\ he\ CAN'T\ open\ my\ profile\ under\ the\ top\ right\ user\ icon,\ instead\ gets\ a\ warning\ \(\.\.\.not\ allowed\ to\ access\ res.partner...record:company id)...

SO I guess I have to extend my record rule? Any help is appreciated