Frappe User Permissions restrict to certain doctype

I have a requirement where i would want to restrict users to not be able to view all the documents for a certain doctype. I have one primary doctype “Job” and multiple doctypes which link to the “Job” doctype like “Job Details”, “Job Execution Details”, etc. Also, I have specific requirement where the users with certain role type should only be able to see “jobs” which are in certain status. Like users with “Executor User” role should only be able to see jobs in “in-progress” status jobs. I tried adding user permissions in “User Permissions” whenever a job status changes. All the users will have a “job user” role and I have added a “role permission” for "Job → “Job User” → Select, Read. But what happens is, if there is a user permission for a user, then only that job is visible. But if no user permission is added to that user, then all the jobs are visible which is not what we want. What can we do about this?

Thanks,
Hab