Wizard was deployed without an entry in security/ir.model.access.csv, so ANY user (including managers) got a permission error when opening the menu. The model is registered but has no group access rules, so Odoo's ORM blocks read/create on it. Grant full CRUD on fusion.clock.nfc.enrollment.wizard to group_fusion_clock_manager (the same group the menu is gated to). Bump manifest to 19.0.3.1.1.