odoo's ir.model.access.csv is usually used when setting permissions. base.group_user is actually the [human resources/employee] in the user group. Usually, when the module is updated, the data of ir.model.access.csv will be introduced to update the access rights in the user group ""Human Resources/Employee".