diff --git a/auth_brute_force/__openerp__.py b/auth_brute_force/__openerp__.py
index 667f7cb56..b05790164 100644
--- a/auth_brute_force/__openerp__.py
+++ b/auth_brute_force/__openerp__.py
@@ -33,6 +33,7 @@
         'web',
         ],
     'data': [
+        'security/ir_model_access.yml',
         'data/ir_config_parameter.xml',
         'views/view.xml',
         'views/action.xml',
diff --git a/auth_brute_force/security/ir_model_access.yml b/auth_brute_force/security/ir_model_access.yml
new file mode 100644
index 000000000..57919b774
--- /dev/null
+++ b/auth_brute_force/security/ir_model_access.yml
@@ -0,0 +1,28 @@
+# -*- encoding: utf-8 -*-
+- !record {model: ir.model.access, id: access_res_authentication_attempt_all}:
+    model_id: model_res_authentication_attempt
+    name: Authentication Attempt All Users
+    perm_read: true
+
+- !record {model: ir.model.access, id: access_res_banned_remote_all}:
+    model_id: model_res_banned_remote
+    name: Banned Remote All Users
+    perm_read: true
+
+- !record {model: ir.model.access, id: access_res_authentication_attempt_manager}:
+    group_id: base.group_system
+    model_id: model_res_authentication_attempt
+    name: Authentication Attempt Manager
+    perm_create: true
+    perm_read: true
+    perm_write: true
+    perm_unlink: true
+
+- !record {model: ir.model.access, id: access_res_banned_remote_manager}:
+    group_id: base.group_system
+    model_id: model_res_banned_remote
+    name: Banned Remote Manager
+    perm_create: true
+    perm_read: true
+    perm_write: true
+    perm_unlink: true