In our portal we offer access to our customers from different companies. We would like to only show our customers in the portal issues and documents they should see. This should include attachments mentioned anywhere in issues they have access to, as well as attachments uploaded and associated with that company's partner_id. We tried doing this both with record level access on ir.attachment or with the Domain on the Window Action.

For example:

['|', '|', 
 ('partner_id', '=', user.partner_id.id),   
 ('partner_id.child_ids', 'in', [user.partner_id.id]),  
 ('partner_id.parent_id.child_ids', 'in', [user.partner_id.id]),

]

This works fine for the listing of all documents but does not include documents posted by a different company on an issue where the customer has access to.

Any thoughts?