following

Go to Settings > Technical > Security > Record Rules.

Create two new record rules, one for vendor bills and one for bill payments.

• For Vendor Bills:
  • Model: account.move
  • Apply following domain to restrict access to the bills created by the user

• [('move_type', '=', 'in_invoice'), ('create_uid', '=', user.id)]
  

• Action: Read

For Bill Payments:

• Model: account.payment
• Apply the following domain to restrict access to bill payments created by the user:

[('payment_type', '=', 'inbound'), ('create_uid', '=', user.id)]