diff --git a/account_bank_statement_import_online_ponto/__manifest__.py b/account_bank_statement_import_online_ponto/__manifest__.py
index 919f0e0a..0a5b371d 100644
--- a/account_bank_statement_import_online_ponto/__manifest__.py
+++ b/account_bank_statement_import_online_ponto/__manifest__.py
@@ -13,5 +13,8 @@
     "license": "AGPL-3",
     "installable": True,
     "depends": ["account_bank_statement_import_online"],
-    "data": ["view/online_bank_statement_provider.xml"],
+    "data": [
+        "security/ir.model.access.csv",
+        "view/online_bank_statement_provider.xml",
+    ],
 }
diff --git a/account_bank_statement_import_online_ponto/readme/CONTRIBUTORS.rst b/account_bank_statement_import_online_ponto/readme/CONTRIBUTORS.rst
index 077a3ecf..5544a1f7 100644
--- a/account_bank_statement_import_online_ponto/readme/CONTRIBUTORS.rst
+++ b/account_bank_statement_import_online_ponto/readme/CONTRIBUTORS.rst
@@ -2,3 +2,6 @@
 * `Tecnativa <https://www.tecnativa.com>`__:
 
   * Pedro M. Baeza
+* `Therp BV <https://therp.nl>`__:
+
+  * Ronald Portier
diff --git a/account_bank_statement_import_online_ponto/security/ir.model.access.csv b/account_bank_statement_import_online_ponto/security/ir.model.access.csv
new file mode 100644
index 00000000..4950f516
--- /dev/null
+++ b/account_bank_statement_import_online_ponto/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_ponto_buffer,access_ponto_buffer,model_ponto_buffer,base.group_user,1,0,0,0
+access_ponto_buffer_line,access_ponto_buffer_line,model_ponto_buffer_line,base.group_user,1,0,0,0