diff --git a/evaluation.py b/evaluation.py
index d24aa22..491a313 100644
--- a/evaluation.py
+++ b/evaluation.py
@@ -183,10 +183,13 @@ class Evaluation(ModelSQL, ModelView):
             if evaluation.dashb_actwin:
                 to_delete_window.append(evaluation.dashb_actwin)
 
-        if len(to_delete_uiview) > 0:
-            UiView.delete(to_delete_uiview)
-        if len(to_delete_window) > 0:
-            ActWin.delete(to_delete_window)
+        with Transaction().set_context({
+            '_check_access': False,
+            }):
+            if len(to_delete_uiview) > 0:
+                UiView.delete(to_delete_uiview)
+            if len(to_delete_window) > 0:
+                ActWin.delete(to_delete_window)
 
     @classmethod
     def uiview_create(cls, evaluations):
@@ -202,22 +205,25 @@ class Evaluation(ModelSQL, ModelView):
 
         to_write_eval = []
         for evaluation in evaluations:
-            view_graph, = UiView.create([
-                cls.get_create_view_data(evaluation),
-                ])
+            with Transaction().set_context({
+                '_check_access': False,
+                }):
+                view_graph, = UiView.create([
+                    cls.get_create_view_data(evaluation),
+                    ])
 
-            dashb_actwin, = ActWin.create([{
-                'name': evaluation.dtype_string,
-                'res_model': 'cashbook_report.eval_line',
-                'usage': 'dashboard',
-                'domain': '[["evaluation", "=", %d]]' % evaluation.id,
-                }])
+                dashb_actwin, = ActWin.create([{
+                    'name': evaluation.name,
+                    'res_model': 'cashbook_report.eval_line',
+                    'usage': 'dashboard',
+                    'domain': '[["evaluation", "=", %d]]' % evaluation.id,
+                    }])
 
-            dashb_actview, = ActView.create([{
-                'sequence': 10,
-                'view': view_graph.id,
-                'act_window': dashb_actwin.id,
-                }])
+                dashb_actview, = ActView.create([{
+                    'sequence': 10,
+                    'view': view_graph.id,
+                    'act_window': dashb_actwin.id,
+                    }])
 
             to_write_eval.extend([
                 [evaluation],
@@ -228,7 +234,6 @@ class Evaluation(ModelSQL, ModelView):
                 }])
 
         if len(to_write_eval) > 0:
-            print('-- to_write_eval:', to_write_eval)
             Evaluation2.write(*to_write_eval)
 
     @classmethod
diff --git a/ir.xml b/ir.xml
index 0a7916a..96b603a 100644
--- a/ir.xml
+++ b/ir.xml
@@ -5,19 +5,37 @@ full copyright notices and license terms. -->
 <tryton>
     <data>
 
-        <record model="ir.model.access" id="access_iruiview-group_cashbook">
-            <field name="model" search="[('model', '=', 'ir.ui.view')]"/>
-            <field name="group" ref="cashbook.group_cashbook"/>
+        <!-- limit visibility to owner - read for owner-->
+        <record model="ir.rule.group" id="rg_iractwin_group_cashbook_read">
+            <field name="model" search="[('model', '=', 'ir.action.act_window')]"/>
+            <field name="name">Owner: IR Act Window read</field>
+            <field name="global_p" eval="False"/>
+            <field name="default_p" eval="False"/>
             <field name="perm_read" eval="True"/>
-            <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="True"/>
-            <field name="perm_delete" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.rule" id="rg_iractwin_group_cashbook_read-2">
+            <field name="domain" eval="[
+                ('res_model', '=', 'cashbook_report.eval_line'),
+                ['OR',
+                    ('create_uid', '=', Eval('user', {}).get('id', -1)),
+                    ('create_uid', '=', 0),
+                ],
+                ]" pyson="1"/>
+            <field name="rule_group" ref="rg_iractwin_group_cashbook_read"/>
+        </record>
+        <record model="ir.rule.group-res.group"
+            id="rg_iractwin_group_cashbook_read-group_cashbook">
+            <field name="rule_group" ref="rg_iractwin_group_cashbook_read"/>
+            <field name="group" ref="cashbook.group_cashbook"/>
         </record>
 
-        <!-- permission by rule - anon -->
-        <record model="ir.rule.group" id="rg_iruiview_anon">
-            <field name="model" search="[('model', '=', 'ir.ui.view')]"/>
-            <field name="name">Anon: IR UI View read</field>
+        <!-- allow read for created by root -->
+        <record model="ir.rule.group" id="rg_iractwin_anon">
+            <field name="model" search="[('model', '=', 'ir.action.act_window')]"/>
+            <field name="name">Anon: IR Act Window read</field>
             <field name="global_p" eval="False"/>
             <field name="default_p" eval="True"/>
             <field name="perm_read" eval="True"/>
@@ -25,40 +43,17 @@ full copyright notices and license terms. -->
             <field name="perm_create" eval="False"/>
             <field name="perm_delete" eval="False"/>
         </record>
-        <record model="ir.rule" id="rg_iruiview_anon-1">
-            <field name="domain" eval="[]" pyson="1"/>
-            <field name="rule_group" ref="rg_iruiview_anon"/>
-        </record>
-
-        <!-- permission by rule - group_cashbook - edit -->
-        <record model="ir.rule.group" id="rg_iruiview_group_cashbook">
-            <field name="model" search="[('model', '=', 'ir.ui.view')]"/>
-            <field name="name">Owner: IR UI View edit</field>
-            <field name="global_p" eval="False"/>
-            <field name="default_p" eval="False"/>
-            <field name="perm_read" eval="True"/>
-            <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="True"/>
-            <field name="perm_delete" eval="True"/>
-        </record>
-        <record model="ir.rule" id="rg_iruiview_group_cashbook-2">
+        <record model="ir.rule" id="rg_iractwin_anon-1">
             <field name="domain" eval="[
-                ('model', '=', 'cashbook_report.eval_line'),
-                ('type', '=', 'graph'),
-                ('module', '=', 'cashbook_report'),
-                ('create_uid', '=', Eval('user', {}).get('id', -1)),
+                    ('res_model', '!=', 'cashbook_report.eval_line'),
                 ]" pyson="1"/>
-            <field name="rule_group" ref="rg_iruiview_group_cashbook"/>
-        </record>
-        <record model="ir.rule.group-res.group" id="rg_iruiview_group_cashbook-group_cashbook">
-            <field name="rule_group" ref="rg_iruiview_group_cashbook"/>
-            <field name="group" ref="cashbook.group_cashbook"/>
+            <field name="rule_group" ref="rg_iractwin_anon"/>
         </record>
 
-        <!-- permission by rule - group_admin -->
-        <record model="ir.rule.group" id="rg_iruiview_group_admin">
-            <field name="model" search="[('model', '=', 'ir.ui.view')]"/>
-            <field name="name">Administrator: IR UI View edit</field>
+        <!-- allow write for admin -->
+        <record model="ir.rule.group" id="rg_iractwin_group_admin">
+            <field name="model" search="[('model', '=', 'ir.action.act_window')]"/>
+            <field name="name">Admin: IR Act Window write</field>
             <field name="global_p" eval="False"/>
             <field name="default_p" eval="False"/>
             <field name="perm_read" eval="True"/>
@@ -66,12 +61,13 @@ full copyright notices and license terms. -->
             <field name="perm_create" eval="True"/>
             <field name="perm_delete" eval="True"/>
         </record>
-        <record model="ir.rule" id="rg_iruiview_group_admin-1">
+        <record model="ir.rule" id="rg_iractwin_group_admin-1">
             <field name="domain" eval="[]" pyson="1"/>
-            <field name="rule_group" ref="rg_iruiview_group_admin"/>
+            <field name="rule_group" ref="rg_iractwin_group_admin"/>
         </record>
-        <record model="ir.rule.group-res.group" id="rg_iruiview_group_admin-group_admin">
-            <field name="rule_group" ref="rg_iruiview_group_admin"/>
+        <record model="ir.rule.group-res.group"
+            id="rg_iractwin_group_admin-group_admin">
+            <field name="rule_group" ref="rg_iractwin_group_admin"/>
             <field name="group" ref="res.group_admin"/>
         </record>
 
diff --git a/line.xml b/line.xml
index 5aac1dd..6325a01 100644
--- a/line.xml
+++ b/line.xml
@@ -47,5 +47,10 @@ full copyright notices and license terms. -->
             <field name="act_window" ref="act_evaluation_graph_view"/>
         </record>
 
+        <record model="ir.action-res.group" id="graph_view-group_cashbook">
+            <field name="action" ref="act_evaluation_graph_view"/>
+            <field name="group" ref="cashbook.group_cashbook"/>
+        </record>
+
     </data>
 </tryton>
diff --git a/tryton.cfg b/tryton.cfg
index 90013f0..7c0ce6c 100644
--- a/tryton.cfg
+++ b/tryton.cfg
@@ -1,14 +1,14 @@
 [tryton]
 version=6.0.0
 depends:
-    ir
+    res
     cashbook
 xml:
     icon.xml
     message.xml
-    ir.xml
     evaluation.xml
     line.xml
     evaluation_context.xml
     evaluation_wizard.xml
+    ir.xml
     menu.xml