Missing access rule for customs module
The customs modules declares a "Customs Administration" group but this group does not have any access rules related. This produces that any user on the system is allowed to alter the customs configuration records values, updating all the values of the related products.