Base Rule Visibility Restriction

This module extends Odoo's record rules (the access rules that decide which records each user can see or change) with a new field called "Excluded Groups".

• On the record rule form, a new "Excluded Groups" section appears where you can select one or more user groups.
• When Odoo collects the record rules that apply to a user, any rule that lists one of that user's groups as excluded is removed from the set of rules applied to that user.
• The exclusion is evaluated per user and per operation (read, write, create, unlink), because the rule lookup is done separately for each access mode.
• Only active rules that grant the relevant permission are considered, so inactive rules are unaffected.

The change touches the ir.rule model and its form view, and it interacts with res.groups through the new field. No new menus, reports, emails or scheduled actions are added. The feature is purely a security configuration helper: it lets you keep a broad rule in place while carving out exceptions for particular groups, instead of duplicating rules or restructuring groups.