diff --git a/__manifest__.py b/__manifest__.py
index 82047da253ee122e7bc562f726039322ae6d8820..c2945e9b98f816d83e324cfcb593c0cf884ba093 100644
--- a/__manifest__.py
+++ b/__manifest__.py
@@ -11,6 +11,7 @@
         'cgscop_timesheet'
     ],
     "data": [
+        "security/security_rules.xml",
         "views/calendar.xml",
         "wizard/calendar_event_transform.xml",
     ],
diff --git a/security/security_rules.xml b/security/security_rules.xml
new file mode 100644
index 0000000000000000000000000000000000000000..3757547df552612749d78ef0abc690770c60453e
--- /dev/null
+++ b/security/security_rules.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0"?>
+<!-- Copyright 2019 Le Filament
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+
+<odoo>
+    <data>
+        <record id="calendar_event_my_ur" model="ir.rule">
+            <field name="name">Calendar Event my UR</field>
+            <field name="model_id" ref="calendar.model_calendar_event"/>
+            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field eval="True" name="global"/>
+        </record>
+        <record id="calendar.calendar_event_rule_my" model="ir.rule">
+            <field name="name">My Calendar Events</field>
+            <field name="model_id" ref="calendar.model_calendar_event"/>
+            <field name="domain_force">[('user_id','=',user.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+    </data>
+</odoo>