flectra/addons/note/security/note_security.xml

<?xml version="1.0"?>
<flectra>
    <record id="note_note_rule_global" model="ir.rule">
        <field name="name">Only followers can access a sticky notes</field>
        <field name="model_id" ref="model_note_note"/>
        <field name="domain_force">['|', ('user_id', '=', user.id), ('message_partner_ids', '=', user.partner_id.id)]</field>
        <field name="global" eval="True"/>
        <field name="perm_create" eval="False"/>
        <field name="perm_unlink" eval="False"/>
    </record>

    <record id="note_note_create_unlink_global" model="ir.rule">
        <field name="name">note: create / unlink: responsible</field>
        <field name="model_id" ref="model_note_note"/>
        <field name="domain_force">[('user_id', '=', user.id)]</field>
        <field name="global" eval="True"/>
        <field name="perm_write" eval="False"/>
        <field name="perm_read" eval="False"/>
    </record>

    <record id="note_stage_rule_global" model="ir.rule">
        <field name="name">Each user have his stage name</field>
        <field name="model_id" ref="model_note_stage"/>
        <field name="domain_force">['|',('user_id','=',False),('user_id','=',user.id)]</field>
        <field name="global" eval="True"/>
    </record>

</flectra>