library/library_app/security/library_security.xml

<?xml version="1.0" ?>
<odoo>
    <record id="module_library_category" model="ir.module.category">
        <field name="name">Library</field>
    </record>
    <record id="library_group_user" model="res.groups">
        <field name="name">User</field>
        <field name="category_id" ref="module_library_category"/>
        <field name="implied_ids" eval="[(4,ref('base.group_user'))]"/>
    </record>
    <record id="library_group_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="category_id" ref="module_library_category"/>
        <field name="implied_ids" eval="[(4,ref('library_group_user'))]"/>
        <field name="users" eval="[
            (4,ref('base.user_root')),
            (4,ref('base.user_admin'))
        ]"/>
    </record>
    <data noupdate="0">
        <record id="book_user_rule" model="ir.rule">
            <field name="name">Library Book User Access</field>
            <field name="model_id" ref="model_library_book"/>
            <field name="domain_force">
                [('active','=', True)]
            </field>
            <field name="groups" eval="[(4,ref('library_group_user'))]"/>
        </record>
    </data>
</odoo>