diff --git a/app_odoo_customize/__manifest__.py b/app_odoo_customize/__manifest__.py
index 1526f35e..09fd7e22 100644
--- a/app_odoo_customize/__manifest__.py
+++ b/app_odoo_customize/__manifest__.py
@@ -63,6 +63,8 @@ The user can get the help document just by one click.
         # data
         'data/ir_config_parameter.xml',
         'data/res_groups.xml',
+        'security/ir.model.access.csv',
+        'security/security.xml',
     ],
     'demo': [],
     'test': [
diff --git a/app_odoo_customize/security/ir.model.access.csv b/app_odoo_customize/security/ir.model.access.csv
new file mode 100644
index 00000000..4f359da1
--- /dev/null
+++ b/app_odoo_customize/security/ir.model.access.csv
@@ -0,0 +1,2 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_app_theme_config_settings,access_app_theme_config_settings,model_app_theme_config_settings,base.group_user,1,1,1,1
diff --git a/app_odoo_customize/security/security.xml b/app_odoo_customize/security/security.xml
new file mode 100644
index 00000000..7beed59d
--- /dev/null
+++ b/app_odoo_customize/security/security.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0"?>
+<odoo>
+    <record model="ir.rule" id="app_theme_config_settings_comp_rule">
+        <field name="name">app_theme_config_settings multi-company</field>
+        <field name="model_id" ref="app_odoo_customize.model_app_theme_config_settings"/>
+        <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
+        <field name="perm_read" eval="1"/>
+        <field name="perm_create" eval="1"/>
+        <field name="perm_write" eval="1"/>
+        <field name="perm_unlink" eval="1"/>
+    </record>
+</odoo>