From my own, i think it's from far too easy to say "It's a bug!". Before giving you a path to find your solution, it will be good to know what you call "full rights" because all i see in the message sent by openerp is just:" hey guy, you're trying to access something you are not permit to". Simply said: " hi friend just go check the Access List Control (ACL) located under Settings >> Technical >> Security >> Access List Control and see if the group your user belongs to has the permission to validate invoice. Document: Account mean , Operation : Read mean that your user just have the right to see things related to Accounting but can not yet modify nor create anything there. So go check your ACL related to "Account" and you will find that it is not a bug but a misconfiguration.

Best regards!

in addition to @Techno Geek solution you might need to replace the domain rule with

[(1,'=',1)]

Kindly try following option to fix this problem: 

error-1:
The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
(Document type: account.account, Operation: read)

Solution: Record Rules : Account - Account Multi company - permission : Read

After solving this error you may get another error:

error-2:
The requested operation cannot be completed due to security restrictions. Please contact your system administrator.
(Document type: Journal Item, Operation: write)

Solution: Record Rules : Journal - Journal Multi company - permission : Write

It is a bug in res.partner.py that is already patched. The patch is not in the regular downloads of the software yet AFAIK. Bug number 1073087 (Launchpad)