I have a publisher group . They have the permission to read/write/delete for their created records only. i.e ('create_uid','=', user.id).

This is working fine.  But my requirement is they can also read records created by other publisher , i.e.('create_uid','!=', user.id) where only read permission will be applicable.  

But When i write the record rule for that domain , i am able to read/write /delete other's record. is there any other way around or am i doing anything wrong.