You should make sure that the _rocrail daemon user has read/write access to the device where your model railroad is connected to. For a serial port, you could add _rocrail to group dialer.