Before this commit, the portal user can read the `project.update` and `project.milestone` records but there is no reason to grant this access for those models. This commit removes the read access for thoses models since we don't show the data in its portal. X-original-commit: f0331531826974ddaab5dff28739115c37a351c0 Forward-port-of: #88546 Forward-port-of: #88509 Part-of: odoo/odoo#88819