[hr_expense_extended] fix security
[hr_document] fix __openerp.py