[IMP] base, *: tighten `ir.model.access` access rights

addons/point_of_sale/models/pos_session.py

addons/website_crm_partner_assign/__manifest__.py

addons/website_crm_partner_assign/data/portal_data.xml

...s/website_crm_partner_assign/security/ir.model.access.csv

addons/website_crm_partner_assign/security/ir_rule.xml

odoo/addons/base/security/ir.model.access.csv