Anyone at any access level can go in and see the 'configuration' page in an odoo module.
Eg "see own leads" in sales can then go in and change the configuration of the sales app. Can this be changed?
1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.