fix dashboard bug when user has no permission on an app_model