GOLEM/golem_base/security/golem_security.xml

<?xml version="1.0" encoding="utf-8"?>

<!--
Copyright 2016 Fabien Bourgeois <fabien@yaltik.com>

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
-->

<odoo>
  <data noupdate="0">
    <!-- Groups -->
    <record id="group_golem_user" model="res.groups">
      <field name="name">GOLEM user</field>
      <field name="category_id"
        ref="base.module_category_golem"/>
      <field name="implied_ids"
        eval="[(4,
        [ref('base.group_user'), ref('account.group_account_invoice')])]"/>
    </record>
    <record id="group_golem_manager" model="res.groups">
      <field name="name">GOLEM Manager</field>
      <field name="category_id" ref="base.module_category_golem"/>
      <field name="implied_ids" eval="[(4, ref('group_golem_user'))]"/>
      <field name="users" eval="[(4, ref('base.user_root'))]"/>
    </record>
    <!-- Hide Default Articles Menu for all except root -->
    <record id="account.menu_finance_payables" model="ir.ui.menu">
      <field name="groups_id"
        eval="[(6, 0, [ref('base.group_erp_manager')])]" />
    </record>
    <!-- Membership products only for managers -->
    <record id="membership.menu_membership_products" model="ir.ui.menu">
      <field name="groups_id"
        eval="[(4, ref('golem_base.group_golem_manager'))]" />
    </record>
    <!-- Members Analysis for managers only -->
    <record id="membership.menu_report_membership" model="ir.ui.menu">
      <field name="groups_id"
        eval="[(6, 0, [ref('golem_base.group_golem_manager')])]" />
    </record>
  </data>
</odoo>