whatsapp_web_groups/helpdesk_extras/security/helpdesk_security.xml

<?xml version="1.0" encoding="utf-8"?>
<odoo>
    <data noupdate="1">
        
        <!-- Helpdesk Team Collaborator: Portal users can only see their own collaboration -->
        <record id="helpdesk_team_collaborator_rule_portal" model="ir.rule">
            <field name="name">Helpdesk Team Collaborator: portal users can only see their own collaboration</field>
            <field name="model_id" ref="helpdesk_extras.model_helpdesk_team_collaborator"/>
            <field name="domain_force">[
                '|',
                    ('partner_id', '=', user.partner_id.id),
                    ('team_id.collaborator_ids', 'any', [
                        ('partner_id', '=', user.partner_id.id),
                        ('access_mode', '=', 'admin'),
                    ]),
            ]</field>
            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
        </record>

        <!-- Helpdesk Team: Portal users can see teams where they are followers, or teams without followers -->
        <record id="helpdesk_team_rule_portal_collaborator" model="ir.rule">
            <field name="name">Helpdesk Team: portal users can see teams where they are followers, or teams without followers</field>
            <field name="model_id" ref="helpdesk.model_helpdesk_team"/>
            <field name="domain_force">[
                '|',
                    ('message_partner_ids', '=', False),
                    ('message_partner_ids', 'in', [user.partner_id.id]),
            ]</field>
            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
        </record>

        <!-- Helpdesk Ticket: Portal users with admin access can see all tickets in the team -->
        <record id="helpdesk_ticket_rule_portal_admin" model="ir.rule">
            <field name="name">Helpdesk Ticket: portal users with admin access can see all tickets</field>
            <field name="model_id" ref="helpdesk.model_helpdesk_ticket"/>
            <field name="domain_force">[
                '|',
                    ('team_id.message_partner_ids', '=', False),
                    '&amp;',
                        ('team_id.message_partner_ids', 'in', [user.partner_id.id]),
                        ('team_id.collaborator_ids', 'any', [
                            ('partner_id', '=', user.partner_id.id),
                            ('access_mode', '=', 'admin'),
                        ]),
            ]</field>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="True"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="False"/>
            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
        </record>

        <!-- Helpdesk Ticket: Portal users with user_all access can see all tickets and create own -->
        <record id="helpdesk_ticket_rule_portal_user_all" model="ir.rule">
            <field name="name">Helpdesk Ticket: portal users with user_all access can see all tickets</field>
            <field name="model_id" ref="helpdesk.model_helpdesk_ticket"/>
            <field name="domain_force">[
                '|',
                    ('team_id.message_partner_ids', '=', False),
                    '&amp;',
                        ('team_id.message_partner_ids', 'in', [user.partner_id.id]),
                        ('team_id.collaborator_ids', 'any', [
                            ('partner_id', '=', user.partner_id.id),
                            ('access_mode', '=', 'user_all'),
                        ]),
            ]</field>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="False"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="False"/>
            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
        </record>

        <!-- Helpdesk Ticket: Portal users with user_own access can only see and create own tickets -->
        <record id="helpdesk_ticket_rule_portal_user_own" model="ir.rule">
            <field name="name">Helpdesk Ticket: portal users with user_own access can only see own tickets</field>
            <field name="model_id" ref="helpdesk.model_helpdesk_ticket"/>
            <field name="domain_force">[
                '|',
                    ('team_id.message_partner_ids', '=', False),
                    '&amp;',
                        ('team_id.message_partner_ids', 'in', [user.partner_id.id]),
                        '&amp;',
                            ('team_id.collaborator_ids', 'any', [
                                ('partner_id', '=', user.partner_id.id),
                                ('access_mode', '=', 'user_own'),
                            ]),
                            '|',
                                ('partner_id', '=', user.partner_id.id),
                                ('user_id', '=', user.id),
            ]</field>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="False"/>
            <field name="perm_create" eval="True"/>
            <field name="perm_unlink" eval="False"/>
            <field name="groups" eval="[(4, ref('base.group_portal'))]"/>
        </record>

    </data>
</odoo>