Hi, You can give rights to the user group. You do this on your python file, like this:

'employee': fields.char(string='Employee name',read=['base.group_sale_salesman'],write=['base.group_sale_manager'])

This will give group_sale_salesman read-only permissions, and group_sale_manager write permissions...