diff --git a/addons/im/security/ir.model.access.csv b/addons/im/security/ir.model.access.csv
index 5137990498a..d35d694661a 100644
--- a/addons/im/security/ir.model.access.csv
+++ b/addons/im/security/ir.model.access.csv
@@ -1,4 +1,4 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
 access_im_message,im.message,model_im_message,,1,0,1,0
 access_im_user,im.user,model_im_user,,1,1,1,0
-access_im_session,im.session,model_im_session,,1,0,0,0
\ No newline at end of file
+access_im_session,im.session,model_im_session,,1,1,1,0
\ No newline at end of file
diff --git a/addons/sale/sale.py b/addons/sale/sale.py
index 8848ba9df2b..a8851c654f8 100644
--- a/addons/sale/sale.py
+++ b/addons/sale/sale.py
@@ -1014,8 +1014,8 @@ class account_invoice(osv.Model):
         sale_order_obj = self.pool.get('sale.order')
         res = super(account_invoice, self).confirm_paid(cr, uid, ids, context=context)
         so_ids = sale_order_obj.search(cr, uid, [('invoice_ids', 'in', ids)], context=context)
-        if so_ids:
-            sale_order_obj.message_post(cr, uid, so_ids, body=_("Invoice paid"), context=context)
+        for so_id in so_ids:
+            sale_order_obj.message_post(cr, uid, so_id, body=_("Invoice paid"), context=context)
         return res
 
     def unlink(self, cr, uid, ids, context=None):