home/security/security.xml

<?xml version="1.0" encoding="UTF-8"?>
<odoo>
    <record id="home_page_access" model="ir.model.access">
        <field name="name">Home Page Access</field>
        <field name="model_id" ref="model_home_page"/>
        <field name="group_id" ref="base.group_user"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="0"/>
        <field name="perm_create" eval="0"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <record id="codes_access" model="ir.model.access">
        <field name="name">Home Codes Access</field>
        <field name="model_id" ref="home.model_codes"/>
        <field name="group_id" ref="base.group_user"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>
</odoo>