odoo/addons/account/account_security.xml

<?xml version="1.0" encoding="utf-8"?>
<terp>
    <data noupdate="1">
        <record id="group_account_invoice" model="res.groups">
            <field name="name">Financial Invoice</field>
        </record>
        
        <record id="group_account_user" model="res.groups">
            <field name="name">Financial User</field>
        </record>
        
        <record id="group_account_admin" model="res.groups">
            <field name="name">Financial Admin</field>
        </record>
        
        <record id="base.user_admin" model="res.users">
            <field eval="[(4, ref('base.group_admin')), (4, ref('group_account_invoice')), (4, ref('group_account_user')), (4, ref('group_account_admin'))]" name="groups_id"/>
        </record>
        
        <record id="access_payment_term" model="ir.model.access">
            <field name="name">Payment Term</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.payment.term')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_payment_term_account_admin" model="ir.model.access">
            <field name="name">Payment Term</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.payment.term')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--		<record model="ir.model.access" id="access_payment_term_admin">
			<field name="name">Payment Term</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.payment.term')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_payment_term_line" model="ir.model.access">
            <field name="name">Payment Term Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.payment.term.line')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_payment_term_line_account_admin" model="ir.model.access">
            <field name="name">Payment Term Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.payment.term.line')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        <!--

		<record model="ir.model.access" id="access_payment_term_line_admin">
			<field name="name">Payment Term Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.payment.term.line')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_account_type" model="ir.model.access">
            <field name="name">Account Type</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.account.type')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_account_type_account_admin" model="ir.model.access">
            <field name="name">Account Type</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.account.type')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        <!--

		<record model="ir.model.access" id="access_account_type_admin">
			<field name="name">Account Type</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.account.type')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_account" model="ir.model.access">
            <field name="name">Account</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.account')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_account_account_admin" model="ir.model.access">
            <field name="name">Account</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.account')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        <!--

		<record model="ir.model.access" id="access_account_admin">
			<field name="name">Account</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.account')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_journal_view" model="ir.model.access">
            <field name="name">Journal View</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.view')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_journal_view_account_admin" model="ir.model.access">
            <field name="name">Journal View</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.view')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_journal_view_admin">
			<field name="name">Journal View</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.journal.view')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_journal_column" model="ir.model.access">
            <field name="name">Journal Column</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.column')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_journal_column_account_admin" model="ir.model.access">
            <field name="name">Journal Column</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.column')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_journal_column_admin">
			<field name="name">Journal Column</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.journal.column')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_journal" model="ir.model.access">
            <field name="name">Journal</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_journal_account_admin" model="ir.model.access">
            <field name="name">Journal</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_journal_admin">
			<field name="name">Journal</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.journal')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_fiscalyear" model="ir.model.access">
            <field name="name">Fiscal Year</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.fiscalyear')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_fiscalyear_account_admin" model="ir.model.access">
            <field name="name">Fiscal Year</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.fiscalyear')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_fiscalyear_admin">
			<field name="name">Fiscal Year</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.fiscalyear')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_period" model="ir.model.access">
            <field name="name">Period</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.period')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_period_account_admin" model="ir.model.access">
            <field name="name">Period</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.period')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_period_admin">
			<field name="name">Period</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.period')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_journal_period" model="ir.model.access">
            <field name="name">Journal Period</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.period')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_journal_period_account_admin" model="ir.model.access">
            <field name="name">Journal Period</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.journal.period')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_journal_period_admin">
			<field name="name">Journal Period</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.journal.period')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_move" model="ir.model.access">
            <field name="name">Entry</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_move_account_invoice">
			<field name="name">Entry</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move')]"/>
			<field name="group_id" ref="group_account_invoice"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="False"/>
		</record>-->
        
        <record id="access_move_account_user" model="ir.model.access">
            <field name="name">Entry</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_move_account_admin">
			<field name="name">Entry</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_move_admin">
			<field name="name">Entry</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_move_reconcile" model="ir.model.access">
            <field name="name">Reconciliation</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move.reconcile')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_move_reconcile_account_invoice">
			<field name="name">Reconciliation</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.reconcile')]"/>
			<field name="group_id" ref="group_account_invoice"/>
			<field name="perm_read" eval="False"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="False"/>
		</record>-->
        
        <record id="access_move_reconcile_account_user" model="ir.model.access">
            <field name="name">Reconciliation</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move.reconcile')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_move_reconcile_account_admin">
			<field name="name">Reconciliation</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.reconcile')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_move_reconcile_admin">
			<field name="name">Reconciliation</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.reconcile')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_tax_code" model="ir.model.access">
            <field name="name">Tax Code</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.tax.code')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_tax_code_account_admin" model="ir.model.access">
            <field name="name">Tax Code</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.tax.code')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_tax_code_admin">
			<field name="name">Tax Code</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.tax.code')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_tax" model="ir.model.access">
            <field name="name">Tax</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.tax')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_tax_account_admin" model="ir.model.access">
            <field name="name">Tax</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.tax')]"/>
            <field name="group_id" ref="group_account_admin"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_tax_admin">
			<field name="name">Tax</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.tax')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_budget_post" model="ir.model.access">
            <field name="name">Budget Item</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.budget.post')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_budget_post_account_user" model="ir.model.access">
            <field name="name">Budget Item</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.budget.post')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_budget_post_dotation" model="ir.model.access">
            <field name="name">Budget Item Endowment</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.budget.post.dotation')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_budget_post_dotation_account_user" model="ir.model.access">
            <field name="name">Budget Item Endowment</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.budget.post.dotation')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_model" model="ir.model.access">
            <field name="name">Model</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.model')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_model_account_user" model="ir.model.access">
            <field name="name">Model</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.model')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_model_line" model="ir.model.access">
            <field name="name">Model Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.model.line')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_model_line_account_user" model="ir.model.access">
            <field name="name">Model Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.model.line')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_subscription" model="ir.model.access">
            <field name="name">Subscription</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.subscription')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_subscription_account_user" model="ir.model.access">
            <field name="name">Subscription</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.subscription')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_subscription_line" model="ir.model.access">
            <field name="name">Subscription Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.subscription.line')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_subscription_line_account_user" model="ir.model.access">
            <field name="name">Subscription Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.subscription.line')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement" model="ir.model.access">
            <field name="name">Bank Statement</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_account_user" model="ir.model.access">
            <field name="name">Bank Statement</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_reconcile" model="ir.model.access">
            <field name="name">Statement Reconcile</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.reconcile')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_reconcile_account_user" model="ir.model.access">
            <field name="name">Statement Reconcile</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.reconcile')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_reconcile_line" model="ir.model.access">
            <field name="name">Statement Reconcile Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.reconcile.line')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_reconcile_line_account_user" model="ir.model.access">
            <field name="name">Statement Reconcile Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.reconcile.line')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_bank_statement_reconcile_line_account_admin">
			<field name="name">Statement Reconcile Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.bank.statement.reconcile.line')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_bank_statement_reconcile_line_admin">
			<field name="name">Statement Reconcile Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.bank.statement.reconcile.line')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_bank_statement_line" model="ir.model.access">
            <field name="name">Bank Statement Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.line')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_bank_statement_line_account_user" model="ir.model.access">
            <field name="name">Bank Statement Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.bank.statement.line')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_bank_statement_line_account_admin">
			<field name="name">Bank Statement Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.bank.statement.line')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_bank_statement_line_admin">
			<field name="name">Bank Statement Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.bank.statement.line')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_move_line" model="ir.model.access">
            <field name="name">Entry Lines</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move.line')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_move_line_account_user" model="ir.model.access">
            <field name="name">Entry Lines</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.move.line')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_move_line_account_admin">
			<field name="name">Entry Lines</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.line')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_move_line_account_admin">
			<field name="name">Entry Lines</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.line')]"/>
			<field name="group_id" ref="group_account_invoice"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="False"/>
		</record>

		<record model="ir.model.access" id="access_move_line_admin">
			<field name="name">Entry Lines</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.move.line')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_invoice" model="ir.model.access">
            <field name="name">Invoice</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_invoice_account_invoice" model="ir.model.access">
            <field name="name">Invoice</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice')]"/>
            <field name="group_id" ref="group_account_invoice"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_invoice_account_user">
			<field name="name">Invoice</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice')]"/>
			<field name="group_id" ref="group_account_user"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_account_admin">
			<field name="name">Invoice</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_admin">
			<field name="name">Invoice</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_invoice_line" model="ir.model.access">
            <field name="name">Invoice Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice.line')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_invoice_line_account_invoice" model="ir.model.access">
            <field name="name">Invoice Line</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice.line')]"/>
            <field name="group_id" ref="group_account_invoice"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_invoice_line_account_user">
			<field name="name">Invoice Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.line')]"/>
			<field name="group_id" ref="group_account_user"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_line_account_admin">
			<field name="name">Invoice Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.line')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_line_admin">
			<field name="name">Invoice Line</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.line')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_invoice_tax" model="ir.model.access">
            <field name="name">Invoice Tax</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice.tax')]"/>
            <field eval="False" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_invoice_tax_account_invoice" model="ir.model.access">
            <field name="name">Invoice Tax</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.invoice.tax')]"/>
            <field name="group_id" ref="group_account_invoice"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_invoice_tax_account_user">
			<field name="name">Invoice Tax</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.tax')]"/>
			<field name="group_id" ref="group_account_user"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_tax_account_admin">
			<field name="name">Invoice Tax</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.tax')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_invoice_tax_admin">
			<field name="name">Invoice Tax</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.invoice.tax')]"/>
			<field name="group_id" ref="base.group_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
    </data>
</terp>