I am testing out Odoo for my small company and running into some problems with groups/permissions/rules.

At this point, only looking at the CRM/contacts section. I've managed to work out the import process and have contacts (individuals) linked to companies. Now I would like to set up access rules for users. Here is what I need to do:

1.

Companies (and their related individuals) need to be classified into groups such as "client," "supplier,""distributor,"or "store."

2.

User access needs to be limited to one or more of the contact groups. For example, user A would be an admin that has access to view everything. User B should only be able to see all "clients." User C should be able to see "distributor" and "store." 

3. 

Private contacts should only be accessible to one person (their "owner").

The documentation pages do not seem to cover this. Some information I have found touches on these areas, but show code (xml?) as solutions. I'm accessing Odoo via a browser and am not sure how or where code is entered. Ideally, I would handle this via spreadsheet columns that can be uploaded/imported.

Can this be done?