storage_image/security/ir_rule.xml
<?xml version="1.0" encoding="UTF-8"?>
<odoo noupdate="1">
<record model="ir.rule" id="storage_file_image_rule">
<field name="name">Storage File for Image</field>
<field name="model_id" ref="model_storage_file"/>
<field name="domain_force">[('file_type','in', ('image', 'thumbnail'))]</field>
<field name="perm_read" eval="0"/>
<field name="perm_create" eval="1"/>
<field name="perm_write" eval="1"/>
<field name="perm_unlink" eval="1"/>
<field name="groups" eval="[(4, ref('storage_image.group_image_manager'))]"/>
</record>
</odoo>