addons/purchase/security/ir.model.access.csv

   1 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink\r
   2 access_purchase_order,purchase.order,model_purchase_order,base.group_user,1,0,0,0\r
   3 access_purchase_order_line,purchase.order.line,model_purchase_order_line,base.group_user,1,0,0,0\r