Portal Graded Partner: read and write assigned leads [('partner_assigned_id','child_of',user.commercial_partner_id.id)] Portal/Public user: read only website published [('website_published','=', True)]