Onboarding todo already generated for those users Project/Task: employees: Full access to own private task only [('project_id', '=', False), ('user_ids', 'in', user.id), ('parent_id', '=', False)] Project/Task: project users: follow required for follower-only projects [ '|', '&', ('project_id', '!=', False), '|', ('project_id.privacy_visibility', '!=', 'followers'), ('project_id.message_partner_ids', 'in', [user.partner_id.id]), '|', ('message_partner_ids', 'in', [user.partner_id.id]), # to subscribe check access to the record, follower is not enough at creation ('user_ids', 'in', user.id) ]