Help Req Openerp Access control list and Grid, role managment etc

Hello Hammad,

Can you please tell me in brief which information you want about Security?

Sincerely,
Deven

Have a look in account 5.0 module: The security is made by 3 files.
account/__terp__.py (that tells in which file are security rules):
@line 40
'update_xml': [
        'security/account_security.xml',
        'security/ir.model.access.csv',

security/account_security.xml (That create group of user, and set access to menu to only those group):
<?xml version="1.0" encoding="utf-8"?><openerp><data noupdate="0">
    <record id="group_account_invoice" model="res.groups">
        <field name="name">Finance / Invoice</field>
    </record>
    <record id="group_account_user" model="res.groups">
        <field name="name">Finance / Accountant</field>
    </record>
    <record id="group_account_manager" model="res.groups">
        <field name="name">Finance / Manager</field>
    </record>
 <record id="menu_finance_configuration" model="ir.ui.menu">
  <field eval="[(6,0,[ref('group_account_manager')])]" name="groups_id"/>
 </record>

security/ir.model.access.csv: (contains security rules for model access, model are OpenErp 'object'):
"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
"access_account_payment_term","account.payment.term","model_account_payment_term","account.group_account_user",1,0,0,0
"access_account_payment_term_line","account.payment.term.line","model_account_payment_term_line","account.group_account_user",1,0,0,0
"access_account_account_type","account.account.type","model_account_account_type","account.group_account_user",1,0,0,0

For the 'id' field you can choose what you want, but be as understandable as you can. Notice in the ir.model.access.csv file that the xml_id have a the module name as prefix. "account."

Be also carreful about the meaning of 'module' and 'model'.
module = an OpenErp Add-ons package.
model = an OpenErp object.