account-financial-reporting/account_financial_report/security/security.xml

<?xml version="1.0" encoding="utf-8"?>
<openerp>
    <data>
        <record model="res.groups" id="group_afreport">
            <field name="name">Account Financial Report</field>
        </record>

        <record id="ir_rule_same_company" model="ir.rule">
            <field name="name">See AFR Reports of My Own Company</field>
            <field model="ir.model" name="model_id" ref="model_afr"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="True"/>
            <field eval="False" name="global"/>
            <field name="domain_force">[('company_id','=',user.company_id.id)]</field>
            <field name="groups" eval="[(4,ref('account_financial_report.group_afreport'))]"/>
        </record>
    </data>
</openerp>