news/security/security.xml

<?xml version="1.0" encoding="UTF-8"?>
<odoo>
    <record id="demo_demo_access" model="ir.model.access">
        <field name="name">Demo Access</field>
        <field name="model_id" ref="model_news_info"/>
        <field name="group_id" ref="base.group_user"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>

    <!-- Access Right for Sync News Data -->
    <record id="sync_news_data_access" model="ir.model.access">
        <field name="name">Sync News Data Access</field>
        <field name="model_id" ref="model_auto_news_sync"/>
        <field name="group_id" ref="base.group_user"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="0"/>
    </record>

    <!-- Access Right for Delete News Data -->
    <record id="delete_news_data_access" model="ir.model.access">
        <field name="name">Delete News Data Access</field>
        <field name="model_id" ref="model_auto_news_delete"/>
        <field name="group_id" ref="base.group_user"/>
        <field name="perm_read" eval="1"/>
        <field name="perm_write" eval="1"/>
        <field name="perm_create" eval="1"/>
        <field name="perm_unlink" eval="1"/>
    </record>
</odoo>