odoo_source/addons/project/project_security.xml

<?xml version="1.0"?>
<terp>
	<data noupdate="1">
		<record model="res.groups" id="group_project_consultant">
			<field name="name">Project Consultant</field>
		</record>
		
		<record model="res.groups" id="group_project_manager">
			<field name="name">Project Manager</field>
		</record>
		
		<record model="res.groups" id="group_project_member">
			<field name="name">Project Member - Expert</field>
		</record>
		
		<record model="res.groups" id="group_project_member_begin">
			<field name="name">Project Member - Beginner</field>
		</record>
		
		<!-- Project security -->
		<record model="ir.model.access" id="access_project">
			<field name="name">Project</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.project')]"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>
		
		<record model="ir.model.access" id="access_project_consultant">
			<field name="name">Project</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.project')]"/>
			<field name="group_id" ref="group_project_consultant"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>
		
		<record model="ir.model.access" id="access_project_manager">
			<field name="name">Project</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.project')]"/>
			<field name="group_id" ref="group_project_manager"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>
		
		<record model="ir.model.access" id="access_project_member">
			<field name="name">Project</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.project')]"/>
			<field name="group_id" ref="group_project_member"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>
		
		<!-- Project Task security -->
		<record model="ir.model.access" id="access_project_task">
			<field name="name">Project Task</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task')]"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>

		<record model="ir.model.access" id="access_project_task_consultant">
			<field name="name">Project Task</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task')]"/>
			<field name="group_id" ref="group_project_consultant"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_project_task_manager">
			<field name="name">Project Task</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task')]"/>
			<field name="group_id" ref="group_project_manager"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_project_task_member">
			<field name="name">Project Task</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task')]"/>
			<field name="group_id" ref="group_project_member"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>
		
		<record model="ir.model.access" id="access_project_task_member_begin">
			<field name="name">Project Task</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task')]"/>
			<field name="group_id" ref="group_project_member_begin"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="False"/>
		</record>
		
		<!-- Project Work security -->
		<record model="ir.model.access" id="access_project_task_work">
			<field name="name">Project Task Work</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task.work')]"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="False"/>
			<field name="perm_create" eval="False"/>
			<field name="perm_unlink" eval="False"/>
		</record>

		<record model="ir.model.access" id="access_project_task_work_consultant">
			<field name="name">Project Task Work</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task.work')]"/>
			<field name="group_id" ref="group_project_consultant"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_project_task_work_manager">
			<field name="name">Project Task Work</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task.work')]"/>
			<field name="group_id" ref="group_project_manager"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>

		<record model="ir.model.access" id="access_project_task_work_member">
			<field name="name">Project Task Work</field>
			<field name="model_id" model="ir.model" search="[('model', '=', 'project.task.work')]"/>
			<field name="group_id" ref="group_project_member"/>
			<field name="perm_read" eval="True"/>
			<field name="perm_write" eval="True"/>
			<field name="perm_create" eval="True"/>
			<field name="perm_unlink" eval="True"/>
		</record>
		
	</data>
</terp>