[IMP] base: tighten `ir.model.data` access rights

addons/web_tour/models/ir_ui_menu.py

addons/website_blog/models/website_blog.py

addons/website_event_track/models/website_event_track.py

addons/website_forum/models/forum.py

odoo/addons/base/ir/ir_model.py

odoo/addons/base/ir/ir_ui_view.py

odoo/addons/base/module/module.py

odoo/addons/base/module/report/ir_module_reference_print.py

odoo/addons/base/security/ir.model.access.csv

odoo/models.py