diff --git a/radicale_odoo_right/__init__.py b/radicale_odoo_right/__init__.py
index 773a10c..5040386 100644
--- a/radicale_odoo_right/__init__.py
+++ b/radicale_odoo_right/__init__.py
@@ -25,7 +25,12 @@ class Rights(BaseRights):
     """ BaseRights implementation for Odoo Radicale """
 
     def authorized(self, user, path, permission):
-        return permission == 'r'
-
-    def authorized_item(self, user, path, permission):
+        """ Authorized only readonly for authenticated users on their path """
+        if not user:
+            return False
+        if path == '/':
+            return True
+        path = path.strip('/').split('/')
+        if user != path[0]:
+            return False
         return permission == 'r'