Hello,
I have set up record rules in Odoo 17 where employees should only see themselves, and department managers should only see employees under their department and create groups.
For employees, the domain is [('user_id', '=', user.id)].
For department managers, the domain is [('department_id.manager_id.user_id', '=', user.id)].
However, employees are still able to see all employees.