I tried record level security but it didnt work for me because I had to restrict the user to view only transfer orders that were either generated from his warehouse or to his warehouse.
I tried adding query with filter criteria as following
LocationIdFrom = "WAREHOUSE_A"
LocationIdTo = "WAREHOUSE_A"
but above query is than treated as logical AND clause i.e. fetch all records whose locationIdfrom is "WAREHOUSE_A" AND locationIdTo is "WAREHOUSE_A" which returns 0 records.