event: Public [('website_published', '=', True)] Event ticket: public/portal may read published [('event_id.website_published', '=', True)]