Hi,

Odoo enforces write permissions before running a server action because server actions can modify records, and this prevents users with only read rights from indirectly changing data.

If your server action is read-only, you can work around this by using .sudo() inside the Python code so it bypasses write checks while still keeping logic safe. If it needs to update records, the user should logically have write access.

Other options include using a custom button/cron job instead of a server action, or assigning a dedicated security group with the needed rights. Overriding the global check in ir.actions.server.run is possible but not recommended, since it weakens security.

Hope it helps

You were super close, just add allowed groups_id​to the record, and it would not ask for write permissions