calling brain.quantity does brain.getObject().quantity

After going to a resource that you are unauthorized to view, then the error is shown incorrectly because the default UI tries to use properties of the same resource, reraising unauthorized error.

With this commit, if unauthorized is reraised, it tries to show the error from the portal object. If the user is still unauthorized to see the error output, then the error is shown directly without the classic UI.

/reviewed-on nexedi/erp5!192

Apply security in ERP5User methods.

Require the findings to be consistent when applicable.
May happen for example when migrating a user from being handled by one PAS
plugin to another.

It does not depend on a specific plugin.
Also, update all importers.
Also, reduce import cycles in ERP5Security.

The value used to be displayed will be the last value of the tuple

This is "Internal Trade Condition", not "Purchase Trade Condition"

acl_users ERP5 user enumeration plugin(s) already search for Persons by
their user id, so this code duplicates the checks done just a few lines
above it.

Rather than testing before calling.

acl_users is one of the rare objects (with SQL connectors) which are
intended to be fetched by acquisition, allowing overrides.
Also, move code out of try..finally block where possible.

@seb I need this for a wendelin project, but I think it is usefull in generic erp5, is it ok ?

/reviewed-on nexedi/erp5!203

Save all settings with one jIO put only.

Feedback after  8c313674 and
72dfb2c4  from many people where that
they really miss this column in default print mode (having it only in
export mode was not enough) and that they do not need need
modification_date.

accounting: fix "Total Selected Amount" not being updated after searching in grouping reference fast input

This is not yet enabled by default to enable just add Internal Invoice Transaction in allowed content types of Accounting Transaction Module