web/web_dashboard_tile/security/rules.xml

<?xml version="1.0" encoding="utf-8"?>
<openerp>
<data noupdate="1">

    <record id="model_tile_rule" model="ir.rule">
        <field name="name">tile.owner</field>
        <field name="model_id" ref="model_tile_tile" />
        <field name="groups" eval="[(4, ref('base.group_user'))]"/>
        <field name="domain_force">
        [
            '|',
            ('user_id','=',user.id),
            ('user_id','=',False),
            '|',
            ('group_ids','=',False),
            ('group_ids','in',[g.id for g in user.groups_id]),
        ]
        </field>
    </record>

</data>
</openerp>