Restrict Team Staff Access to Their Players Only [('id', 'in', user.partner_id.staff_team_ids.mapped('patient_ids').ids)] Access patient injury records on invitation only [('message_partner_ids', 'in', user.partner_id.ids)]