diff --git a/cetmix_tower_server/security/cx_tower_variable_security.xml b/cetmix_tower_server/security/cx_tower_variable_security.xml
index 50a245bf..2d2de4d2 100644
--- a/cetmix_tower_server/security/cx_tower_variable_security.xml
+++ b/cetmix_tower_server/security/cx_tower_variable_security.xml
@@ -13,7 +13,7 @@
     <record id="cx_tower_variable_rule_group_manager_access" model="ir.rule">
         <field name="name">Tower Variable: Manager Access Rule</field>
         <field name="model_id" ref="model_cx_tower_variable" />
-        <field name="domain_force">[('access_level', '&lt;=', '2')]</field>
+        <field name="domain_force">[('access_level', 'in', ['1', '2'])]</field>
         <field name="groups" eval="[(4, ref('cetmix_tower_server.group_manager'))]" />
     </record>
 
diff --git a/cetmix_tower_server/security/cx_tower_variable_value_security.xml b/cetmix_tower_server/security/cx_tower_variable_value_security.xml
index f3afe7da..cec31c2b 100644
--- a/cetmix_tower_server/security/cx_tower_variable_value_security.xml
+++ b/cetmix_tower_server/security/cx_tower_variable_value_security.xml
@@ -19,7 +19,7 @@
                 ['|',
                  ('is_global', '=', True),
                  '&amp;',
-                 ('access_level', '&lt;=', '2'),
+                 ('access_level', 'in', ['1', '2']),
                  ('server_id.message_partner_ids', 'in', [user.partner_id.id])
                 ]
             </field>