Authorization Bypass

trytond is vulnerable to authorization bypass. The vulnerability exists as the search button ModelView.button in ModelButton.getgroups function does not return the proper group ID for authorization...