trytond Incorrect Authorization vulnerability

trytond 2.4: ModelView.button fails to validate authorization...