Hi everyone,

I've encountered a peculiar issue in Odoo 17.0 Community that I'm hoping to get some insights on. I have applied record rules to ensure that users can only see their own contacts and mailing lists. This setup works well within the general framework of Odoo. However, I've noticed a conflicting behavior with the Email Marketing app.

Despite the record rules, when users utilize the Email Marketing application, they end up sending emails to all contacts when no filters are applied, including those they shouldn't have access to according to the record rules. This is quite puzzling and potentially problematic for privacy and data management.