Steps: - Create a sale order - Send it to the customer - Go to the link in the mail Issue: The avatar of the sender is not displayed in the portal chatter but should be. Reason: Since 16.0 some rules have been added on ``sale.order`` Model, so you need to log in to get the read right Solution: After discussing with reth, we can create a new route in ``portal`` controller just for avatar to be showed by bypassing record access rules but ensure token used is valid. opw-3383983 closes odoo/odoo#145931 X-original-commit: 1e2811139215ad29d7e25641a541c3f4c152649e Signed-off-by: Julien Castiaux (juc) <juc@odoo.com> Signed-off-by: Eteil Junior Djoumatchoua (etdj) <etdj@odoo.com>