We're currently evaluating a new partnership with a similar business, and it could benefit by giving at least one of their employees access to our Odoo (9.0c) deployment. However, they are technically a competitor, and we would like to heavily restrict their access.

Is it possible to really lock down a user's access, namely:

• Keeping them from viewing or exporting contact lists, while still having access to SO's

• Sales pipelines that aren't his own

Giving him access to just view SO's assigned to him would be great.

Any other suggestions?