voip.call: employee managers and department managers can read their subordinates' records [("user_id.employee_id", "any", [ "|", ("parent_id", "child_of", user.employee_id.id), # manager hierarchy ("department_id.manager_id.user_id", "=", user.id), # department manager ])]