ModelStorage.write doesn't check field access for all fields
The method checks only for the field defined in the first values dictionary [1] but it should check for all others dictionary from *args.
[1] http://hg.tryton.org/trytond/file/625e03224672/trytond/model/modelstorage.py#l151