[FIX] res.users: exactly match login when operator in ilike, equal
[FIX] account_invoice: using has_group to determine if user has group group_supplier_inv_check_total

has_group do not care about the fact res.groups is access restricted