library/library_app/security/library_secuity.xml

<?xml version="1.0" encoding="UTF-8" ?>
<odoo>
    <record id="module_library_category" model="ir.module.category">
        <field name="name">Library</field>
    </record>

    <record id="library_group_user" model="res.groups">
        <field name="name">User</field>
        <field name="category_id" ref="module_library_category"/>
        <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
    </record>

    <record id="library_group_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="category_id" ref="module_library_category"/>
        <field name="implied_ids" eval="[(4, ref('library_group_user'))]"/>
        <field name="users" eval="[(4, ref('base.user_root')),(4,ref('base.user_admin'))]"/>
    </record>

    <!--行级权限规则  记录规则位于<data noupdate=”1″>元素中，表示这些记录在模型安装时会被创建，但在模型更新时不会被重写 -->
    <data noupdate="1">
    <record id="book_user_rule" model="ir.rule">
        <field name="name">Library Book User Access</field>
        <field name="model_id" ref="model_library_book"/>
        <field name="domain_force">
            [('active','=', True)]
        </field>
        <field name="groups" eval="[(4, ref('library_group_user'))]"/>
    </record>
    </data>
</odoo>