Put the security groups links in noupdate

Put keep the groups in a noupdate=0 section so the records in ir.model.data
will still be modifiable by other modules.

partner_changeset/security/security.xml

@@ -5,12 +5,22 @@
     <record id="group_changeset_manager" model="res.groups">
       <field name="name">Changeset Configuration</field>
       <field name="comment">The user will have an access to the configuration of the changeset rules.</field>
-      <field name="users" eval="[(4, ref('base.user_root'))]"/>
     </record>
 
     <record id="group_changeset_user" model="res.groups">
       <field name="name">Changesets Validations </field>
       <field name="comment">The user will be able to apply or reject changesets.</field>
+    </record>
+
+  </data>
+
+  <data noupdate="1">
+
+    <record id="group_changeset_manager" model="res.groups">
+      <field name="users" eval="[(4, ref('base.user_root'))]"/>
+    </record>
+
+    <record id="group_changeset_user" model="res.groups">
       <field name="implied_ids" eval="[(4, ref('group_changeset_manager'))]"/>
       <field name="users" eval="[(4, ref('base.user_root'))]"/>
     </record>