social/mail_digest/security/record_rules.xml

<?xml version="1.0"?>
<odoo>

  <record model="ir.rule" id="user_notification_conf_owner">
    <field name="name">Users can edit their own notification settings</field>
    <field name="model_id" ref="model_user_notification_conf"/>
    <field name="perm_read" eval="False"/>
    <field name="perm_create" eval="False"/>
    <field name="perm_write" eval="True"/>
    <field name="perm_unlink" eval="True"/>
    <field name="domain_force">['|',('user_id', '=', user.id), ('create_uid', '=', user.id)]</field>
  </record>

</odoo>