diff --git a/modules/customs/CHANGELOG b/modules/customs/CHANGELOG
index b7f29ac7d6..5ca88db989 100644
--- a/modules/customs/CHANGELOG
+++ b/modules/customs/CHANGELOG
@@ -1,3 +1,4 @@
+* Add access rules
 
 Version 6.8.0 - 2023-05-01
 --------------------------
diff --git a/modules/customs/customs.xml b/modules/customs/customs.xml
index be3df120f9..a6440c0618 100644
--- a/modules/customs/customs.xml
+++ b/modules/customs/customs.xml
@@ -50,6 +50,22 @@ this repository contains the full copyright notices and license terms. -->
             sequence="10"
             id="menu_tariff_code_form"/>
 
+        <record model="ir.model.access" id="access_tariff_code">
+            <field name="model" search="[('model', '=', 'customs.tariff.code')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_tariff_code_admin">
+            <field name="model" search="[('model', '=', 'customs.tariff.code')]"/>
+            <field name="group" ref="group_customs_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
+
         <record model="ir.ui.view" id="duty_rate_view_form">
             <field name="model">customs.duty.rate</field>
             <field name="type">form</field>
@@ -98,5 +114,21 @@ this repository contains the full copyright notices and license terms. -->
             action="act_duty_rate_form"
             sequence="20"
             id="menu_duty_rate_form"/>
+
+        <record model="ir.model.access" id="access_duty_rate">
+            <field name="model" search="[('model', '=', 'customs.duty.rate')]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="False"/>
+            <field name="perm_create" eval="False"/>
+            <field name="perm_delete" eval="False"/>
+        </record>
+        <record model="ir.model.access" id="access_duty_rate_admin">
+            <field name="model" search="[('model', '=', 'customs.duty.rate')]"/>
+            <field name="group" ref="group_customs_admin"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_delete" eval="True"/>
+        </record>
     </data>
 </tryton>