Hello,

I have created 3 groups 

1) User 
2) Owner
3) Manager

Also, I my form view I am defining user, owner and manager (i.e: res.users relation field)

Record A is create by Group User (should only be seen by that user not to the whole group) when it is in draft stage

Then when User click button confirm it should go to the Owner (in this also, should only be seen by that user not to the whole group)

Same going to the manger. 
In the button I given sudo also i.e: 

def approval_user(self):
for rec in self:
rec.sudo().write({
'states': 'owner'
})

but this giving me error

Due to security restrictions, you are not allowed to access 'Invoice Approval' (invoice.approval) records. Records:  003 (id=4) User: Owner (id=9) T

his restriction is due to the following rules: 

- Invoice Approval rule for 'user' 

- Invoice Approval rule for 'Owner' 

Contact your administrator to request access if necessary.

Please help me resolve or understand this issue why Odoo is not capable to handle is kind to access when security X axis and Y axis is applied.