Hi

I want a manufacturing user or manager, that does not have access to sale moudule (is'nt sale user/manager), can see only sale orders that contains a production product. and can not see all of the sale orders.
I define for him all of access rights and menu for see sale orders(all of sale orders). but I can not define "Record Rule" for this role.I don't know choose what object and how write the domain?

Any ideas? thanks