odoo/addons/crm/security/crm_security.xml

<?xml version="1.0" encoding="utf-8"?>
<openerp>
<data noupdate="0">

    <record id="group_crm_manager" model="res.groups">
        <field name="name">CRM / Manager</field>
    </record>

    <record id="group_crm_user" model="res.groups">
        <field name="name">CRM / User</field>
    </record>

    <record model='ir.ui.menu' id='menu_crm'>
        <field name="groups_id" eval="[(6,0,[ref('group_crm_manager'),ref('group_crm_user')])]"/>
    </record>

    <record model='ir.ui.menu' id='menu_crm_configuration'>
        <field name="groups_id" eval="[(6,0,[ref('group_crm_manager')])]"/>
    </record>

    <!--rule for meeting-->
    <record model="ir.rule.group" id="crm_meeting_rule_group">
        <field name="name">crm.meeting.rule</field>
        <field name="model_id" search="[('model','=','crm.meeting')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_meeting_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_meeting_rule_group"/>
    </record>

    <!--rule for Claims-->
    <record model="ir.rule.group" id="crm_claim_rule_group">
        <field name="name">crm.claim.rule</field>
        <field name="model_id" search="[('model','=','crm.claim')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_claim_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_claim_rule_group"/>
    </record>

    <!--rule for Fund Raising-->
    <record model="ir.rule.group" id="crm_fundraising_rule_group">
        <field name="name">crm.fundraising.rule</field>
        <field name="model_id" search="[('model','=','crm.fundraising')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_fundraising_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_fundraising_rule_group"/>
    </record>

    <!--rule for HelpDesk-->
    <record model="ir.rule.group" id="crm_helpdesk_rule_group">
        <field name="name">crm.helpdesk.rule</field>
        <field name="model_id" search="[('model','=','crm.helpdesk')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_helpdesk_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_helpdesk_rule_group"/>
    </record>

    <!--rule for Jobs-->
    <record model="ir.rule.group" id="crm_job_rule_group">
        <field name="name">crm.meeting.rule</field>
        <field name="model_id" search="[('model','=','crm.job')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_job_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_job_rule_group"/>
    </record>

    <!--rule for leads-->
    <record model="ir.rule.group" id="crm_leads_rule_group">
        <field name="name">crm.leads.rule</field>
        <field name="model_id" search="[('model','=','crm.lead')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_leads_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_leads_rule_group"/>
   </record>

    <!--rule for business opportunities-->
	<record model="ir.rule.group" id="crm_opportunities_rule_group">
        <field name="name">crm.opportunities.rule</field>
        <field name="model_id" search="[('model','=','crm.opportunity')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
	<record id="crm_opportunities_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_opportunities_rule_group"/>
    </record>

    <!--rule for phone calls-->
	<record model="ir.rule.group" id="crm_phone_calls_rule_group">
        <field name="name">crm.phone.calls.rule</field>
        <field name="model_id" search="[('model','=','crm.phonecall')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
    <record id="crm_phone_calls_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_phone_calls_rule_group"/>
    </record>

    <!--rule for cases-->
	<record model="ir.rule.group" id="crm_case_rule_group">
        <field name="name">crm.case.rule</field>
        <field name="model_id" search="[('model','=','crm.case')]" model="ir.model"/>
        <field name="global" eval="True"/>
    </record>
    <record id="crm_case_rule" model="ir.rule">
        <field model="ir.model.fields" name="field_id" search="[('model','=','crm.case'),('name','=','section_id')]"/>
        <field name="operator">=</field>
        <field name="operand">user.section_id.id</field>
        <field name="domain_force">['|',('section_id','=',False),('section_id','=',[user.section_id.id])]</field>
        <field name="rule_group" ref="crm_case_rule_group"/>
    </record>
</data>
</openerp>