odoo/bin/addons/base/base_security.xml

<?xml version="1.0"?>
<terp>
<data noupdate="1">

<!--
 Users Groups
-->
    <record model="res.groups" id="group_erp_manager">
        <field name="name">ERP Manager</field>
    </record>
    
    <record model="res.groups" id="group_employee">
        <field name="name">Employee</field>
    </record>

    <record model="res.groups" id="group_account_manager">
        <field name="name">Account Manager</field>
    </record>

    <record model="res.groups" id="group_request">
        <field name="name">Request</field>
    </record>
    
    <record model="res.groups" id="group_extended">
        <field name="name">Extended View</field>
    </record>
    
    <!--<record model="res.groups" id="group_partner">-->
    <!--    <field name="name">Partner </field>-->
    <!--</record>-->

<!--
 Users
-->
    <record model="res.users" id="base.user_root">
        <field name="signature">Root</field>
        <field name="action_id" ref="action_menu_admin"/>
        <field name="menu_id" ref="action_menu_admin"/>
        <field name="address_id" ref="main_address"/>
        <field name="company_id" ref="main_company"/>
    </record>

<!--
 Redefine Root Password Configuration Wizard
-->
    <record id="view_config_root_pw" model="ir.ui.view">
        <field name="name">Define password for Root user</field>
        <field name="model">ir.model.config</field>
        <field name="type">form</field>
        <field name="arch" type="xml">
            <form string="Define password for Root user">
                <separator col="4" colspan="4" string="Set password for the root user"/>
                <newline/>
                <field name="password"/>
                <newline/>
                <field name="password_check"/>
                <group col="4" colspan="4">
                    <button icon="gtk-cancel" name="action_cancel" type="object" string="Cancel" special="cancel"/>
                    <button icon="gtk-ok" name="action_update_pw" type="object" string="Update"/>
                </group>
            </form>
        </field>
    </record>

    <record id="action_config_root_pw" model="ir.actions.act_window">
        <field name="name">Define password for Root user</field>
        <field name="type">ir.actions.act_window</field>
        <field name="res_model">ir.model.config</field>
        <field name="view_type">form</field>
        <field name="view_id" ref="view_config_root_pw"/>
        <field name="target">new</field>
     </record>

    <record id="config_root_pw" model="ir.module.module.configuration.step">
       <field name="name">Define password for Root user</field>
       <field name="note">You must define a new password for the Root user !</field>
       <field name="action_id" ref="action_config_root_pw"/>
       <field name="state">open</field>
    </record>

<!--
 Objects Groups
-->
    
<!-- System -->
    <!--<record model="ir.model" id=".model_ir_actions">-->
    <!--    <field name="type">system</field>-->
    <!--</record>-->
    
    <record model="ir.model" id="base.model_ir_act_report_custom">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_report_xml">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_window">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_window_view">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_wizard">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_url">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_act_server">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_ui_view">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_ui_view_sc">
        <field name="type">system</field>
    </record>

    <record model="ir.model" id="base.model_ir_ui_menu">
        <field name="type">system</field>
    </record>

    <record model="ir.model" id="base.model_ir_report_custom">
        <field name="type">system</field>
    </record>

    <record model="ir.model" id="base.model_ir_report_custom_fields">
        <field name="type">system</field>
    </record>

    <record model="ir.model" id="base.model_res_lang">
        <field name="type">system</field>
    </record>

    <record model="ir.model" id="base.model_res_request">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_sequence">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_sequence_type">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_default">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model_fields">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model_access">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model_data">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model_data">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_model_config">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_attachment">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_cron">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_values">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_translation">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_exports">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_exports_line">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf_activity">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf_transition">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf_instance">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf_workitem">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wkf_triggers">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_rule">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_rule_group">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wizard_ir_model_menu_create">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wizard_ir_model_menu_create_line">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_wizard_module_lang_export">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_repository">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_category">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_module">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_module_dependency">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_module_configuration_step">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_module_module_configuration_wizard">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_res_country">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_res_country_state">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_res_config_view">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_res_request_link">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_res_request_history">
        <field name="type">system</field>
    </record>
    
    <record model="ir.model" id="base.model_ir_property">
        <field name="type">system</field>
    </record>


<!--
 Access
-->
    <record model="ir.model.access" id="access_ir_actions_employee">
        <field name="name">ir.actions.actions Employee</field>
        <field model="ir.model" name="model_id" search="[('model', '=', 'ir.actions.actions')]"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_actions_wizard_group_employee">
        <field name="name">ir_actions_wizard group_employee</field>
        <field model="ir.model" name="model_id" search="[('model', '=', 'ir.actions.wizard')]"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>
    
    
    
    
    
    
    <record model="ir.model.access" id="access_ir_act_window_group_employee">
        <field name="name">ir_act_window group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_act_window"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_act_window_view_group_employee">
        <field name="name">ir_act_window_view group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_act_window_view"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_model_data_group_employee">
        <field name="name">ir_model_data group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_model_data"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_model_fields_group_employee">
        <field name="name">ir_model_fields group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_model_fields"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_module_category_group_employee">
        <field name="name">ir_module_category group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_module_category"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_module_module_group_employee">
        <field name="name">ir_module_module group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_module_module"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_rule_group_employee">
        <field name="name">ir_rule group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_rule"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_rule_group_group_employee">
        <field name="name">ir_rule_group group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_rule_group"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_ui_menu_group_employee">
        <field name="name">ir_ui_menu group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_ui_menu"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_ui_view_group_employee">
        <field name="name">ir_ui_view group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_ui_view"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_ir_ui_view_sc_group_employee">
        <field name="name">ir_ui_view_sc group_employee</field>
        <field model="ir.model" name="model_id" ref="model_ir_ui_view_sc"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_company_group_employee">
        <field name="name">res_company group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_company"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_company_group_erp_manager">
        <field name="name">res_company group_erp_manager</field>
        <field model="ir.model" name="model_id" ref="model_res_company"/>
        <field name="group_id" ref="group_erp_manager"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_country_group_employee">
        <field name="name">res_country group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_country"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_country_state_group_employee">
        <field name="name">res_country_state group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_country_state"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_currency_group_employee">
        <field name="name">res_currency group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_currency"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_currency_rate_group_employee">
        <field name="name">res_currency_rate group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_currency_rate"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_currency_rate_group_account_manager">
        <field name="name">res_currency_rate group_account_manager</field>
        <field model="ir.model" name="model_id" ref="model_res_currency_rate"/>
        <field name="group_id" ref="group_account_manager"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_groups_group_erp_manager">
        <field name="name">res_groups group_erp_manager</field>
        <field model="ir.model" name="model_id" ref="model_res_groups"/>
        <field name="group_id" ref="group_erp_manager"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_lang_group_employee">
        <field name="name">res_lang group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_lang"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_group_employee">
        <field name="name">res_partner group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_address_group_employee">
        <field name="name">res_partner_address group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_address"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_bank_group_employee">
        <field name="name">res_partner_bank group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_bank"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_bank_type_group_employee">
        <field name="name">res_partner_bank_type group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_bank_type"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_bank_type_field_group_employee">
        <field name="name">res_partner_bank_type_field group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_bank_type_field"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_canal_group_employee">
        <field name="name">res_partner_canal group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_canal"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_category_group_employee">
        <field name="name">res_partner_category group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_category"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_event_group_employee">
        <field name="name">res_partner_event group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_event"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_event_type_group_employee">
        <field name="name">res_partner_event_type group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_event_type"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_function_group_employee">
        <field name="name">res_partner_function group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_function"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_som_group_employee">
        <field name="name">res_partner_som group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_som"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_partner_title_group_employee">
        <field name="name">res_partner_title group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_partner_title"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_request_group_request">
        <field name="name">res_request group_request</field>
        <field model="ir.model" name="model_id" ref="model_res_request"/>
        <field name="group_id" ref="group_request"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <record model="ir.model.access" id="access_res_request_group_employee">
        <field name="name">res_request group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_request"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_request_history_group_employee">
        <field name="name">res_request_history group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_request_history"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_request_link_group_employee">
        <field name="name">res_request_link group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_request_link"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_users_group_employee">
        <field name="name">res_users group_employee</field>
        <field model="ir.model" name="model_id" ref="model_res_users"/>
        <field name="group_id" ref="group_employee"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record model="ir.model.access" id="access_res_users_group_erp_manager">
        <field name="name">res_users group_erp_manager</field>
        <field model="ir.model" name="model_id" ref="model_res_users"/>
        <field name="group_id" ref="group_erp_manager"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

</data>
</terp>