diff --git a/app_common/__manifest__.py b/app_common/__manifest__.py
index 1013f9ed..48cc5ec6 100644
--- a/app_common/__manifest__.py
+++ b/app_common/__manifest__.py
@@ -67,9 +67,6 @@
         'web',
     ],
     'data': [
-        # 'security/*.xml',
-        # 'security/ir.model.access.csv',
-        # 'data/.xml',
         'views/ir_cron_views.xml',
         # 'report/.xml',
     ],
diff --git a/app_common/security/app_security.xml b/app_common/security/app_security.xml
deleted file mode 100644
index a4b85605..00000000
--- a/app_common/security/app_security.xml
+++ /dev/null
@@ -1,51 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<odoo>
-    <data noupdate="1">
-        <!--  model权限      -->
-        <record id="acc_module" model="ir.model.access">
-            <field name="name">acc_module_user</field>
-            <field name="model_id" ref="model_app_order"/>
-            <field name="group_id" ref="base.group_user"/>
-            <field name="perm_read" eval="1"/>
-            <field name="perm_write" eval="1"/>
-            <field name="perm_create" eval="1"/>
-            <field name="perm_unlink" eval="1"/>
-        </record>
-        <!-- 应用权限目录 -->
-        <record model="ir.module.category" id="app_module_category_1">
-            <field name="name">App...</field>
-            <field name="description">Helps you manage your ...</field>
-            <field name="sequence">8</field>
-        </record>
-        <!-- 权限用户 -->
-        <!-- 普通 -->
-        <record id="group_app_user" model="res.groups">
-            <field name="name">App User</field>
-            <field name="category_id" ref="app_module_category_1"/>
-            <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
-            <field name="comment">The user will be able to ...</field>
-        </record>
-
-        <!-- 管理员，可以配置 -->
-        <record id="group_app_admin" model="res.groups">
-            <field name="name">App Admin</field>
-            <field name="category_id" ref="app_module_category_1"/>
-            <field name="implied_ids" eval="[(4, ref('group_app_user'))]"/>
-            <field name="comment">The user will be able to config ...</field>
-        </record>
-
-        <!-- group_erp_manager自动有完整权限 -->
-        <record id="base.group_erp_manager" model="res.groups">
-            <field name="implied_ids" eval="[(4, ref('group_app_admin'))]"/>
-        </record>
-
-        <!-- Rules -->
-        <record id="rule_user" model="ir.rule">
-            <field name="name">Users are allowed to access their own m///</field>
-            <field name="model_id" ref="model_app_order"/>
-            <field name="domain_force">['|', ('partner_id', 'in', [user.partner_id.id]), ('user_id.id', '=', user.id)]</field>
-            <field name="groups" eval="[(4, ref('base.group_user'))]"/>
-        </record>
-        <!--End -->
-    </data>
-</odoo>
diff --git a/app_common/security/ir.model.access.csv b/app_common/security/ir.model.access.csv
deleted file mode 100644
index 64f91fa5..00000000
--- a/app_common/security/ir.model.access.csv
+++ /dev/null
@@ -1,3 +0,0 @@
-id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_product_attribute_value_group_user,product_attribute_value_group.user,app_product_variant_pro.model_product_attribute_value_group,base.group_user,1,0,0,0
-access_product_attribute_value_group_manager,product_attribute_value_group.manager,app_product_variant_pro.model_product_attribute_value_group,base.group_erp_manager,1,1,1,1
\ No newline at end of file