Hello, 

Look at this plan:

M - manager

O1 - official

O2 - official

E1 - employee of O1

E2 - employee of O1

E3 - employee of O2

E4 - employee of O2

E1 and E2 made a timesheets to approve. And ONLY O1 and M can validate this timesheets. (O2 and they can't validate it by yourself).

E3 and E4 made a timesheets to approve. And ONLY O2 and M can validate this timesheets. (O1 and they can't validate it by yourself).

O1 and O2 made a timesheets to approve. And ONLY M can validate this timesheets. (They can't validate by yourself).

M made a timesheet to approve. And he can validate this own timesheets, leave's. 

How can I do this hierarchy? I found in Settings -> Users -> user_1 option to set (none, employee, official, manager). But now official can validate own timesheets and leave's.

I want offical couldn't validate own timesheet and Leave(vacation, holidays). Only CEO can approve it for them and for yourself.

I enter the below line in "Domain value" field

[('employee_id.parent_id.user_id','=',uid)]

​and it's helped for first stage. But still official can approve own timesheets and leave's.

Any suggestions?