[FIX] portal, website_crm_partner_assign: fix access action from mail

Two lines have been inverted in ``_get_access_action`` override, leading
to access rights not being correctly checked. This currently leads customers
with token to land on portal without token, which is not the expected
behavior.

Followup of odoo/odoo@a018735

closes odoo/odoo#86646

X-original-commit: dd7d60aca8718763aaa211e138f684d8797f5d8c
Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>

addons/portal/models/portal_mixin.py

@@ -112,8 +112,8 @@ class PortalMixin(models.AbstractModel):
                     access_uid=access_uid, force_website=force_website
                 )
             user = self.env['res.users'].sudo().browse(access_uid)
-        if user.share or force_website:
             record = self.with_user(user)
+        if user.share or force_website:
             try:
                 record.check_access_rights('read')
                 record.check_access_rule('read')

addons/website_crm_partner_assign/models/crm_lead.py

@@ -304,8 +304,8 @@ class CrmLead(models.Model):
             except AccessError:
                 return super(CrmLead, self)._get_access_action(access_uid=access_uid, force_website=force_website)
             user = self.env['res.users'].sudo().browse(access_uid)
-        if user.share or force_website:
             record = self.with_user(user)
+        if user.share or force_website:
             try:
                 record.check_access_rights('read')
                 record.check_access_rule('read')