diff --git a/addons/laundry_management/security/laundry_management_security.xml b/addons/laundry_management/security/laundry_management_security.xml
new file mode 100644
index 0000000..94d7e3f
--- /dev/null
+++ b/addons/laundry_management/security/laundry_management_security.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" ?>
+<odoo>
+    <!--    Defined Groups and Record rules-->
+    <record id="module_category_laundry" model="ir.module.category">
+        <field name="name">Laundry</field>
+        <field name="sequence">18</field>
+    </record>
+    <record model="res.groups.privilege" id="res_groups_privilege_laundry">
+        <field name="name">Laundry</field>
+        <field name="category_id" ref="module_category_laundry"/>
+        <field name="sequence">7</field>
+    </record>
+
+    <record id="group_laundry_user" model="res.groups">
+        <field name="name">Laundry User</field>
+        <field name="privilege_id" ref="res_groups_privilege_laundry"/>
+        <field name="user_ids" eval="[(4, ref('base.group_user'))]"/>
+    </record>
+
+    <record id="group_laundry_manager" model="res.groups">
+        <field name="name">Laundry Manager</field>
+        <field name="implied_ids" eval="[(4, ref('group_laundry_user'))]"/>
+        <field name="privilege_id" ref="res_groups_privilege_laundry"/>
+    </record>
+
+    <record id="group_laundry_admin" model="res.groups">
+    <field name="name">Laundry Admin</field>
+    <field name="implied_ids" eval="[(4, ref('group_laundry_manager'))]"/>
+    <field name="privilege_id" ref="res_groups_privilege_laundry"/>
+    <field name="user_ids" eval="[(4, ref('base.user_admin'))]"/>
+</record>
+
+    <record id="laundry_order_admin_rule" model="ir.rule">
+        <field name="name">Laundry Manager: Full access</field>
+        <field name="model_id" ref="model_laundry_order"/>
+        <field name="domain_force">[(1,'=',1)]</field>
+        <field name="groups" eval="[(4,ref('group_laundry_manager'))]"/>
+    </record>
+    <record id="laundry_order_user_rule" model="ir.rule">
+        <field name="name">User: own document only</field>
+        <field name="model_id" ref="model_laundry_order"/>
+        <field name="domain_force">[('laundry_person_id','=',user.id)]
+        </field>
+        <field name="groups" eval="[(4,ref('group_laundry_user'))]"/>
+    </record>
+</odoo>