contract/contract_sale/security/contract_security.xml

<?xml version="1.0" encoding="utf-8"?>
<odoo noupdate="1">

    <record id="contract_contract_own_salesman" model="ir.rule">
        <field name="name">See Own Contracts</field>
        <field name="model_id" ref="contract.model_contract_contract"/>
        <field name="domain_force">['|', ('user_id','=',user.id), ('user_id','=',False)]</field>
        <field name="groups" eval="[(4,ref('sales_team.group_sale_salesman'))]"/>
    </record>
    <record id="contract_contract_see_all" model="ir.rule">
        <field name="name">See All Contracts</field>
        <field name="model_id" ref="contract.model_contract_contract"/>
        <field name="domain_force">[(1,'=',1)]</field>
        <field name="groups" eval="[
            (4,ref('sales_team.group_sale_salesman_all_leads')),
            (4,ref('account.group_account_invoice'))]"/>

    </record>

</odoo>