Hi,

When you record a payment from register payment wizard, it creates a payment entry in the table account.payment which is created by inheriting from account.move model.

class AccountPayment(models.Model):
    _name = "account.payment"
    _inherits = {'account.move': 'move_id'}

for this reason, you need to create the access right for account.move model, if you need to bypass it, safely you can consider adding the sudo with the function which is responsible for creating the payment entry.

Thanks