Hi Felipe,
The good part is that you can do this all by default with Odoo and Odoo studio. The security configuration of the default apps can be done from the users under Settings > Users & companies > Users. Configure the user so he/she has rights to the (default) apps you'd like. An example for a user James who has only rights on sales and subscriptions:
The second part, setting security on your custom apps is a little more difficult. First create your apps with Studio and when it is done go to the tab "Access Controls" in Odoo studio. For every model you have here you will need to create security rules to say which users can - or cannot - access items. For example:
In this example only users that are within the group "Sales / Manager" will be able to see, write, create and delete on the menu item "test_model". Users with the right "Sales / User: All documents" (as configured on the user in this example) will only be able to see items on this new menuitem. If the user does not have one of these two rights he will not see the menu and will not be able to do anything with it. Sadly Odoo Studio has no functionality right now to choose to hide a whole app for specific users types so you will need to make your own rules for every menu item.
Regards,
Yenthe