partner-contact/partner_changeset/security/security.xml

<?xml version="1.0" encoding="utf-8"?>
<openerp>
  <data>

    <record id="group_changeset_manager" model="res.groups">
      <field name="name">Changeset Configuration</field>
      <field name="comment">The user will have an access to the configuration of the changeset rules.</field>
    </record>

    <record id="group_changeset_user" model="res.groups">
      <field name="name">Changesets Validations </field>
      <field name="comment">The user will be able to apply or reject changesets.</field>
    </record>

  </data>

  <data noupdate="1">

    <record id="group_changeset_manager" model="res.groups">
      <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>

    <record id="group_changeset_user" model="res.groups">
      <field name="implied_ids" eval="[(4, ref('group_changeset_manager'))]"/>
      <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>

  </data>
</openerp>