library/library_app/security/library_security.xml

<?xml version="1.0" ?>
<odoo>

    <!-- Library 权限组分类 -->
    <record id="module_library_category" model="ir.module.category">
        <field name="name">Library</field>
    </record>

    <!-- Library 普通用户组 -->
    <record id="library_group_user" model="res.groups">
        <field name="name">User</field>
        <field name="category_id" ref="module_library_category" />
        <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
    </record>

    <!-- Library 管理员组 -->
    <record id="library_group_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="category_id" ref="module_library_category" />
        <field name="implied_ids" eval="[(4, ref('library_group_user'))]" />
        <field name="users" eval="[
                    (4, ref('base.user_root')),
                    (4, ref('base.user_admin'))
                ]" />
    </record>

    <!-- 
        Library 记录规则 
        普通用户组只能看到 active = True 的书籍
        # noupdate="1" 只在安装时创建，更新规则时需要留意
    -->
    <data noupdate="1">
        <record id="book_user_rule" model="ir.rule">
            <field name="name">Library Book User Access</field>
            <field name="model_id" ref="model_library_book" />
            <field name="domain_force">
                [('active','=',True)]
            </field>
            <field name="groups" eval="[(4,ref('library_group_user'))]" />
        </record>
    </data>

    <record id="book_manager_rule" model="ir.rule">
        <field name="name">Library Book manager Access</field>
        <field name="model_id" ref="model_library_book" />
        <field name="groups" eval="[(4,ref('library_group_manager'))]" />
    </record>
</odoo>