[FIX] project: access task without project

Allow access to task without a project defined if the user is follower.
Fixes #3450

diff --git a/addons/project/security/project_security.xml b/addons/project/security/project_security.xml
index 649f518..444a9d0 100644 (file)
--- a/addons/project/security/project_security.xml
+++ b/addons/project/security/project_security.xml
@@ -82,7 +82,9 @@
         <field name="domain_force">['|',
                                         ('project_id.privacy_visibility', 'in', ['public', 'employees']),
                                         '&amp;',
-                                            ('project_id.privacy_visibility', '=', 'followers'),
+                                            '|',
+                                                ('project_id', '=', False),
+                                                ('project_id.privacy_visibility', '=', 'followers'),
                                             ('message_follower_ids', 'in', [user.partner_id.id]),
                                     ]</field>
         <field name="groups" eval="[(4,ref('base.group_user'))]"/>