diff --git a/security/ir.model.access.csv b/security/ir.model.access.csv
new file mode 100644
index 0000000000000000000000000000000000000000..79974346ae2ecd74824003377ecc9873799c75e6_c2VjdXJpdHkvaXIubW9kZWwuYWNjZXNzLmNzdg==
--- /dev/null
+++ b/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+marketing_campaign_tracker_trackitem,marketing_campaign_tracker_user,marketing_campaign_tracker_trackitem,group_marketing_campaign_tracker_user,1,1,1,1
+marketing_campaign_tracker_trackvisit,marketing_campaign_tracker_user,marketing_campaign_tracker_trackvisit,group_marketing_campaign_tracker_user,1,1,1,1
diff --git a/security/security.xml b/security/security.xml
new file mode 100644
index 0000000000000000000000000000000000000000..79974346ae2ecd74824003377ecc9873799c75e6_c2VjdXJpdHkvc2VjdXJpdHkueG1s
--- /dev/null
+++ b/security/security.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+<data noupdate="1">
+
+    <record id="module_category_markerting_campaign_tracker" model="ir.module.category">
+        <field name="name">Group Marketing campaign tracker</field>
+        <field name="visible">1</field>
+    </record>
+
+    <!-- res.groups are declared first -->
+
+    <record id="group_marketing_campaign_tracker_user" model="res.groups">
+        <field name="name">User</field>
+        <field name="category_id" ref="module_category_markerting_campaign_tracker"/>
+        <field name="users" eval="[(4, ref('base.user_root'))]"/>
+    </record>
+    
+</data>
+
+</openerp>