galicea-odoo-addons-ecosystem/galicea_git/security/security.xml

<?xml version="1.0" encoding="utf-8"?>
  <odoo>
    <record id="module_category_git" model="ir.module.category">
      <field name="name">Git</field>
    </record>

    <record id="group_collaborator" model="res.groups">
      <field name="name">Collaborator</field>
      <field name="category_id" ref="module_category_git" />
    </record>

    <record id="group_admin" model="res.groups">
      <field name="name">Administrator</field>
      <field name="category_id" ref="module_category_git" />
      <field name="implied_ids" eval="[(4,ref('group_collaborator'))]" />
    </record>

    <record id="base.group_erp_manager" model="res.groups">
      <field name="implied_ids" eval="[(4,ref('group_admin'))]" />
    </record>

    <record id="repository_collaborator_access_rule" model="ir.rule">
      <field name="name">Collaborators can only access repositories they are assigned to</field>
      <field name="model_id" ref="model_galicea_git_repository" />
      <field name="groups" eval="[(4, ref('group_collaborator'))]"/>
      <field name="domain_force">
        [('collaborator_ids', 'in', user.id)]
      </field>
      <field eval="1" name="perm_read" />
      <field eval="0" name="perm_write" />
      <field eval="0" name="perm_create" />
      <field eval="0" name="perm_unlink" />
    </record>

    <record id="repository_admin_access_rule" model="ir.rule">
      <field name="name">Administrators can access any repositories</field>
      <field name="model_id" ref="model_galicea_git_repository" />
      <field name="groups" eval="[(4, ref('group_admin'))]"/>
      <field name="domain_force">
        [(1, '=', 1)]
      </field>
      <field eval="1" name="perm_read" />
      <field eval="0" name="perm_write" />
      <field eval="0" name="perm_create" />
      <field eval="0" name="perm_unlink" />
    </record>
</odoo>