If you read the documentation /doc/access_levels.txt part 5.:
5. Example access control configuration file
--------------------------------------------
This is content of sample access control file for CRM extension module:
<?php
/*
Define security section codes
*/
define('SS_CRM_C', 101<<8);
define('SS_CRM', 102<<8);
define('SS_CRM_A', 103<<8);
/*
Additional security sections for CRM module
*/
$security_sections[SS_CRM_C] = _("CRM configuration");
$security_sections[SS_CRM] = _("CRM transactions");
$security_sections[SS_CRM_A] = _("CRM analytics");
/*
Additional security areas for CRM module
*/
$security_areas['SA_CRMSETUP'] = array(SS_CRM_C|1, _("CRM module setup"));
$security_areas['SA_CRMCONTACTENTRY'] = array(SS_CRM|1, _("Customer contact entry"));
$security_areas['SA_CRMANALYITCS'] = array(SS_CRM|1, _("Pre-sale contact analytics"));
?>
The exact values used for security section codes are not very important,
as they are rewritten by access control system during integration of
access extensions. Therefore numeric values of security sections/areas should
never be used directly in the extensions source. Use string representations
instead when needed, or values retrieved from $security_areas array.
The exact values used for security section codes are not very important,
as they are rewritten by access control system during integration of
access extensions.
Though I never try to confirm this.