Hi, 

You can try creating a custom decorator and use it in routes,

from odoo import http
from odoo.http import request

class TestController(http.Controller):

@http.route('/web/tests', type='http', auth='user')
@check_user_groups('your_module.your_group')
def tests(self, **kw):

​#Your controller 

Now you have to create the custom decorator,

from functools import wraps
from odoo.exceptions import AccessError

def check_user_groups(group_xml_id):
​def decorator(func):
​ ​@wraps(func)
​ ​def wrapper(self, *args, **kwargs):
​ ​ ​if not request.env.user.has_group(group_xml_id):
​ ​ ​ ​raise AccessError("You do not have access rights to view this page.")
​ ​ ​return func(self, *args, **kwargs)
​ ​return wrapper
​return decorator

this decorator checks if the current user is part of the specified group and manage the access at the route level.

Thanks