From a055e50c439c978fe912876a5782e207e3391a3c Mon Sep 17 00:00:00 2001
From: Florian da Costa <florian.dacosta@akretion.com>
Date: Fri, 26 Jun 2026 12:03:47 +0200
Subject: [PATCH 1/2] [IMP] project_customer_access: Hide note for customer
 users

---
 .../project_customer_access_security.xml      | 25 +++++++++++++++++++
 .../views/project_task_views.xml              |  7 +++++-
 2 files changed, 31 insertions(+), 1 deletion(-)

diff --git a/project_customer_access/security/project_customer_access_security.xml b/project_customer_access/security/project_customer_access_security.xml
index 7dc6f01a..0db99ba9 100644
--- a/project_customer_access/security/project_customer_access_security.xml
+++ b/project_customer_access/security/project_customer_access_security.xml
@@ -62,4 +62,29 @@
         </field>
         <field name="groups" eval="[(4,ref('project_customer_access.group_budget'))]" />
     </record>
+
+    <record id="mail.mail_message_subtype_rule_public" model="ir.rule">
+        <field
+            name="groups"
+            eval="[(4,ref('project_customer_access.group_customer'))]"
+        />
+    </record>
+
+    <!-- backend user are considered as internal for technical reasons un base_user_group
+         so they see all messages. We add a rule to hide internal note anyway -->
+    <record id="rule_project_customer_access_no_internal_note" model="ir.rule">
+        <field name="name">Project Customer Access: No internal Note</field>
+        <field name="model_id" ref="mail.model_mail_message" />
+        <field name="domain_force">
+            ['|', ('subtype_id', '=', False), ('subtype_id.internal', '=', False)]
+        </field>
+        <field name="perm_create" eval="0" />
+        <field name="perm_read" eval="1" />
+        <field name="perm_write" eval="0" />
+        <field name="perm_unlink" eval="0" />
+        <field
+            name="groups"
+            eval="[(4,ref('project_customer_access.group_customer'))]"
+        />
+    </record>
 </odoo>
diff --git a/project_customer_access/views/project_task_views.xml b/project_customer_access/views/project_task_views.xml
index 61c92570..e0d51e67 100644
--- a/project_customer_access/views/project_task_views.xml
+++ b/project_customer_access/views/project_task_views.xml
@@ -228,9 +228,14 @@
         <field name="arch" type="xml">
             <form
                 string="Task"
-                class="o_form_project_tasks"
+                class="o_form_project_tasks o_hide_log_note"
                 js_class="project_task_form"
             >
+                <style>
+                .o_hide_log_note .o-mail-Chatter-logNote {
+                    display: none !important;
+                }
+            </style>
                 <header>
                     <field
                         name="stage_id"

From b757b6bc4235f78d3d42653dfa14fa13449076fa Mon Sep 17 00:00:00 2001
From: Florian da Costa <florian.dacosta@akretion.com>
Date: Fri, 26 Jun 2026 12:38:26 +0200
Subject: [PATCH 2/2] [IMP] project_customer_access: Remove possibility on
 assigning internal users at creation for customer users

---
 .../views/project_task_views.xml                   | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/project_customer_access/views/project_task_views.xml b/project_customer_access/views/project_task_views.xml
index e0d51e67..e3f275dd 100644
--- a/project_customer_access/views/project_task_views.xml
+++ b/project_customer_access/views/project_task_views.xml
@@ -412,6 +412,18 @@
         </field>
     </record>
 
+    <record id="quick_create_task_form_customer_access" model="ir.ui.view">
+        <field name="name">project.task.form.quick_create.customer.access</field>
+        <field name="model">project.task</field>
+        <field name="inherit_id" ref="project.quick_create_task_form" />
+        <field name="mode">primary</field>
+        <field name="arch" type="xml">
+            <xpath expr="//field[@name='user_ids']" position="attributes">
+                <attribute name="invisible">1</attribute>
+            </xpath>
+        </field>
+    </record>
+
     <record id="view_task_kanban" model="ir.ui.view">
         <field name="name">project.task.kanban (in project_customer_access)</field>
         <field name="model">project.task</field>
@@ -421,7 +433,7 @@
                 default_group_by="stage_id"
                 class="o_kanban_small_column o_kanban_project_tasks"
                 on_create="quick_create"
-                quick_create_view="project.quick_create_task_form"
+                quick_create_view="project_customer_access.quick_create_task_form_customer_access"
                 examples="project"
                 js_class="project_task_kanban"
                 sample="1"