I have 3 user groups:

• member
• branch_manager (inherits member)
• central_admin (inherits branch_manager)

Based on the user groups they need to see (or not) specific records / views / fields

How can I add some menus which will be visible only for member but not for branch_manager or central_admin, or others for branch_managers but hidden for central_admin ?

Some reasons:

• members can see only a limited set of fields in a list (with no form)
• branch managers should see a more detailed list with a form but only for members of the branches for which they manage (they can use the limited list above to see the others but not with a form)
• central admin should see directly the full list and form for all members (not filtered) so the previous two are useless for them
  

Limiting menu access to specific user groups works fine, but because the groups are inheriting the lower ones central admin sees all of them

It would have been nice to be able to set negation of a group using ! like possible for fields, but apparently it's not supported for menu items

PS: as a side note I've also discovered that specifying groups_id on ir.ui.view and ir.actions.act_window doesn't actually protect them not to be opened by users which are not member of those groups, they can still access the actions and render the views if they access it by manipulating URL action-ID (I've raised a question on GitHub for this)