In openerp 7.0 and sitll 8.0 you can access any view by manipulating URL even if the related menu is not available to you. This addon is my solution to this problem.
This module restict user to only actions that she has access to from user interface. This modules check for group_id that is defined in the action and if user does not member of that group it drops it. If you want add your group to given action add this to one of the xml files: Best Regards M.samadi