[FIX] hr: trust account when needed

Changing the value of `allow_out_payment` when it was already set to
False would trigger an AccessError.

closes odoo/odoo#128800

X-original-commit: 74f15362beaf967cefe509d5b9b66c5436bb661b
Signed-off-by: Kevin Baptiste <kba@odoo.com>

addons/hr/models/hr_employee.py

@@ -397,7 +397,8 @@ class HrEmployeePrivate(models.Model):
             if account_id:
                 bank_account = self.env['res.partner.bank'].browse(account_id)
                 if vals['work_contact_id'] != bank_account.partner_id.id:
-                    bank_account.sudo().allow_out_payment = False
+                    if bank_account.allow_out_payment:
+                        bank_account.sudo().allow_out_payment = False
                     bank_account.partner_id = vals['work_contact_id']
             self.message_unsubscribe(self.work_contact_id.ids)
             if vals['work_contact_id']: