Roles and permissions

The correct way to add new capabilities for your module is to create a file called access.php in your modules DB folder (mod/mymodule/db/access.php).

This is documented at Development:NEWMODULE Adding capabilities Which I have just substantially edited to make it clearer.