Am trying to restrict users from changing the main company details from the employee address_id many2one link.

a user with sales rights and employee rights are able to navigate to partner page from here and change the main company information. Is there a way of preventing this from happening from that link without having to make the link un clickable

<odoo>
    <data noupdate="1">
        <record id="hr_ke_paye_partner" model="ir.rule">
            <field name="name">Employee Read Only Partner</field>
            <field name="model_id" ref="hr.model_res_partner"/>
            <field name="perm_read" eval="1"/>
            <field name="perm_write" eval="0"/>
            <field name="perm_create" eval="0"/>
            <field name="perm_unlink" eval="0"/>
            <field name="groups" eval="[(4,ref('base.group_user'))]"/>
        </record>
    </data>
</odoo>

access_res_partner_group_user_hr,res_partner_hr_group,base.model_res_partner,hr.group_hr_user,1,1,1,1
access_res_partner_group_user_emp,res_partner_base_group,base.model_res_partner,base.group_user,1,0,0,0