[trunk/7.0] Access rights not correctly taken into account for reports

Go on a runbot DB all

1. Select the "Invoices" report in Settings > Technical > Action > Reports
2. Modify the security on the second tab by adding "Fleet / User" in the security (That's stupid but it's for the sake of the demo)
3. Change the access rights of the demo user so that he has accounting manager rights, but not fleet / user rights
4. Connect with demo user
5. Go on an invoice that's validated. That's ok for the "print top" button: the report dissapeared. but:
6. You'll see the print button in the status bar is still available and usable while Demo user shouldn't have access to it.
7. Moreover, if you use the invoice report and that this report created an attachment, the attachment would be downloadable (less important here but still wrong)