odoo/addons/account/project/project_security.xml

<?xml version="1.0" encoding="utf-8"?>
<terp>
    <data noupdate="1">
        
        <record id="access_analytic_account" model="ir.model.access">
            <field name="name">Analytic Accounts</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.analytic.account')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_analytic_account_account_user" model="ir.model.access">
            <field name="name">Analytic Accounts</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.analytic.account')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        
        <!--<record model="ir.model.access" id="access_analytic_account_account_admin">
			<field name="name">Analytic Accounts</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.account')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <record id="access_analytic_journal" model="ir.model.access">
            <field name="name">Analytic Journal</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.analytic.journal')]"/>
            <field eval="True" name="perm_read"/>
            <field eval="False" name="perm_write"/>
            <field eval="False" name="perm_create"/>
            <field eval="False" name="perm_unlink"/>
        </record>
        
        <record id="access_analytic_journal_account_user" model="ir.model.access">
            <field name="name">Analytic Journal</field>
            <field model="ir.model" name="model_id" search="[('model', '=', 'account.analytic.journal')]"/>
            <field name="group_id" ref="group_account_user"/>
            <field eval="True" name="perm_read"/>
            <field eval="True" name="perm_write"/>
            <field eval="True" name="perm_create"/>
            <field eval="True" name="perm_unlink"/>
        </record>
        <!--

		<record model="ir.model.access" id="access_analytic_journal_account_admin">
			<field name="name">Analytic Journal</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.journal')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <!--<record model="ir.model.access" id="access_analytic_budget_post">
			<field name="name">Budget Item</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post')]"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>

		<record model="ir.model.access" id="access_analytic_budget_post_account_user">
			<field name="name">Budget Item</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post')]"/>
			<field name="group_id" ref="group_account_user"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <!--<record model="ir.model.access" id="access_analytic_budget_post_account_admin">
			<field name="name">Budget Item</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
        <!--<record model="ir.model.access" id="access_analytic_budget_post_dotation">
			<field name="name">Budget Item Endowment</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post.dotation')]"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>

		<record model="ir.model.access" id="access_analytic_budget_post_dotation_account_user">
			<field name="name">Budget Item Endowment</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post.dotation')]"/>
			<field name="group_id" ref="group_account_user"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>
-->
        <!--<record model="ir.model.access" id="access_analytic_budget_post_dotation_account_admin">
			<field name="name">Budget Item Endowment</field>
			<field name="model_id" model="ir.model"
				search="[('model', '=', 'account.analytic.budget.post.dotation')]"/>
			<field name="group_id" ref="group_account_admin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>-->
        
    </data>
</terp>