For historical reason (problably the inheritS between project and AA, removed in 12.0), portal user can read Analytic Account. This makes no sense, as it is a purely internal resource for companies. Removing the access rights don't change anything for portal user and make those data secure. Task-1911581