[IMP] base: tighten `ir.model.fields` access rights

addons/account/models/chart_template.py

addons/crm/wizard/base_partner_merge.py

addons/product/models/res_company.py

addons/stock_account/models/account_chart_template.py

addons/web_diagram/controllers/main.py

odoo/addons/base/ir/ir_model.py

odoo/addons/base/ir/ir_translation.py

odoo/addons/base/module/report/ir_module_reference_print.py

odoo/addons/base/res/ir_property.py

odoo/addons/base/security/ir.model.access.csv

odoo/report/custom.py