diff --git a/addons/product/product_security.xml b/addons/product/product_security.xml
index a48c7c820b9..a26183a813b 100644
--- a/addons/product/product_security.xml
+++ b/addons/product/product_security.xml
@@ -1,12 +1,12 @@
 <?xml version="1.0"?>
 <terp>
-	<data noupdate="1">
+	<data>
 	
 		<record model="res.groups" id="group_product_manager">
 			<field name="name">Product Manager</field>
 		</record>
 		
-		<!-- Purchase order security -->
+		<!-- Product security -->
 		<record model="ir.model.access" id="access_product">
 			<field name="name">Product</field>
 			<field name="model_id" model="ir.model" search="[('model', '=', 'product.product')]"/>
@@ -36,6 +36,36 @@
 			<field name="perm_unlink" eval="True"/>
 		</record>
 	
+		<!-- Product Template security -->
+		<record model="ir.model.access" id="access_product_template">
+			<field name="name">Product Template</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.template')]"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="False"/>
+			<field name="perm_create" eval="False"/>
+			<field name="perm_unlink" eval="False"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_template_manager">
+			<field name="name">Product Template</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.template')]"/>
+			<field name="group_id" ref="group_product_manager"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+		
+		<record model="ir.model.access" id="access_product_template_admin">
+			<field name="name">Product Template</field>
+			<field name="model_id" model="ir.model" search="[('model', '=', 'product.template')]"/>
+			<field name="group_id" ref="base.group_admin"/>
+			<field name="perm_read" eval="True"/>
+			<field name="perm_write" eval="True"/>
+			<field name="perm_create" eval="True"/>
+			<field name="perm_unlink" eval="True"/>
+		</record>
+	
 	</data>
 </terp>