Hello,

I have a fresh installation of odoo v11 and I have installed the CRM module. I created an user with the User: Own Documents Only group but when I connected with the new user and tried to create a lead I got an access denial.
Error while validating constraint

The requested operation cannot be completed due to security restrictions. Please contact your system administrator.

(Document type: crm.lead, Operation: read)
None

Then I checked record rules related to crm.lead model and found there are 2 record rules which cause this error to occur:

1. Leads with assigned activities --> domain_force = [('activity_ids.user_id','=',user.id)]

2. Personal Leads --> domain_force = ['|',('user_id','=',user.id),('user_id','=',False)]

The only shared thing between these rules is user_id in the domain.

I can't get what is wrong here because there is an ACL granting read access to the group User: Own Documents Only