diff --git a/security/ir.model.access.csv b/security/ir.model.access.csv
index 4e85c8934fae93d8ce127bf5f9b4c3b51b92c077..df9975129daf2d4ef59e0245e09608af2b4e7822 100644
--- a/security/ir.model.access.csv
+++ b/security/ir.model.access.csv
@@ -9,4 +9,3 @@ access_project_project_cg_manager,access_project_project_cg,model_project_projec
 access_account_analytic_account_ur_manager,access_account_analytic_account_ur,analytic.model_account_analytic_account,cgscop_partner.group_ur_list_modif,1,1,1,1
 access_account_analytic_account_cg_manager,access_account_analytic_account_cg,analytic.model_account_analytic_account,cgscop_partner.group_cg_administrator,1,1,1,1
 access_cgscop_timesheet_sheet_user,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_hr_timesheet_user,1,1,1,1
-access_cgscop_timesheet_sheet_manager,access_cgscop_timesheet_sheet_user,model_cgscop_timesheet_sheet,hr_timesheet.group_timesheet_manager,1,1,1,1
diff --git a/security/security_rules.xml b/security/security_rules.xml
index 6fb3edaf8f7dd5cc92eb9f7560dacfb58575cf56..58d354387b404aaca88fa57ce48c147aad24001a 100644
--- a/security/security_rules.xml
+++ b/security/security_rules.xml
@@ -51,5 +51,31 @@
             <field eval="True" name="global"/>
             <field name="active" eval="False"/>
         </record>
+
+        <record id="account.account_analytic_line_rule_billing_user" model="ir.rule">
+            <field name="name">account.analytic.line.billing.user</field>
+            <field name="model_id" ref="model_account_analytic_line"/>
+            <field name="perm_read" eval="False"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+            <field name="active" eval="False"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_ur" model="ir.rule">
+            <field name="name">Feuilles de temps de mon UR</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[('ur_id','=',user.company_id.ur_id.id)]</field>
+            <field name="groups" eval="[(6, 0, [ref('base.group_user')])]"/>
+            <field eval="True" name="global"/>
+        </record>
+
+        <record id="timesheet_sheet_rule_administrator_ur" model="ir.rule">
+            <field name="name">Feuilles de temps administrator</field>
+            <field name="model_id" ref="cgscop_timesheet.model_cgscop_timesheet_sheet"/>
+            <field name="domain_force">[(1,'=',1)]</field>
+            <field name="groups" eval="[(6, 0, [ref('cgscop_partner.group_cg_administrator')])]"/>
+            <field eval="True" name="global"/>
+        </record>
     </data>
 </odoo>