In odoo-9 every admin having many types of right to give permission of all users and manager.
And Access rights are defined as records of the model ir.model.access.
For example you can see below code->

id,name,model_id/id,group_id/id,perm_read,perm_write,perm_create,perm_unlink
access_idea_idea,idea.idea,model_idea_idea,base.group_user,1,1,1,0
access_idea_vote,idea.vote,model_idea_vote,base.group_user,1,1,1,0

And manually you can see below steps-> Step-1 Settings ->user-> users
Step-2 Create a new group session_read through Settings -> Users -> Groups, it should have read access on the Session model
Step-3 Edit demo make them a member of session_read
Step-4 Log in as John Smith to check the access rights are correct