flectra/addons/web_planner/security/web_planner_security.xml

<?xml version="1.0" encoding="utf-8"?>
<flectra>
    <!-- Portal user and Employee doesn't have access to any planner that is not designed for them -->
    <record id="web_planner_rule_portal" model="ir.rule">
        <field name="name">Portal Planner</field>
        <field name="model_id" ref="model_web_planner"/>
        <field name="perm_read" eval="1" />
        <field name="domain_force">[(0, '=', 1)]</field>
        <field name="groups" eval="[(4, ref('base.group_public')), (4, ref('base.group_user'))]"/>
    </record>

    <!-- Admin and ERP manager have access to planner -->
    <record id="planner_rule_all" model="ir.rule">
        <field name="name">All Planner</field>
        <field name="model_id" ref="model_web_planner"/>
        <field name="domain_force">[(1 ,'=', 1)]</field>
        <field name="groups" eval="[(4, ref('base.group_erp_manager'))]"/>
    </record>
</flectra>