diff --git a/addons_extensions/project_task_timesheet_extended/security/security.xml b/addons_extensions/project_task_timesheet_extended/security/security.xml
index 44d8b4fdc..644877c0c 100644
--- a/addons_extensions/project_task_timesheet_extended/security/security.xml
+++ b/addons_extensions/project_task_timesheet_extended/security/security.xml
@@ -38,27 +38,27 @@
             <value eval="{'noupdate': True}"/>
         </function>
 
-
-        <function name="write" model="ir.model.data">
-            <function name="search" model="ir.model.data">
-                <value eval="[('module', '=', 'project'), ('name', '=', 'project_project_manager_rule')]"/>
-            </function>
-            <value eval="{'noupdate': False}"/>
-        </function>
-
-        <record id="project.project_project_manager_rule" model="ir.rule">
-            <field name="domain_force">[(1, '=', 1)]</field>
-            <field name="perm_read" eval="1"/>
-            <field name="perm_write" eval="1"/>
-            <field name="perm_create" eval="1"/>
-            <field name="perm_unlink" eval="1"/>
-        </record>
-
-        <function name="write" model="ir.model.data">
-            <function name="search" model="ir.model.data">
-                <value eval="[('module', '=', 'project'), ('name', '=', 'project_project_manager_rule')]"/>
-            </function>
-            <value eval="{'noupdate': True}"/>
+
+        <function name="write" model="ir.model.data">
+            <function name="search" model="ir.model.data">
+                <value eval="[('module', '=', 'project'), ('name', '=', 'project_project_manager_rule')]"/>
+            </function>
+            <value eval="{'noupdate': False}"/>
+        </function>
+
+        <record id="project.project_project_manager_rule" model="ir.rule">
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="perm_read" eval="1"/>
+            <field name="perm_write" eval="1"/>
+            <field name="perm_create" eval="1"/>
+            <field name="perm_unlink" eval="1"/>
+        </record>
+
+        <function name="write" model="ir.model.data">
+            <function name="search" model="ir.model.data">
+                <value eval="[('module', '=', 'project'), ('name', '=', 'project_project_manager_rule')]"/>
+            </function>
+            <value eval="{'noupdate': True}"/>
         </function>
         <record id="portfolio_rule_company_projects" model="ir.rule">
             <field name="name">company: Own Company</field>
@@ -122,27 +122,27 @@
         </record>
 
 
-
-        <function name="write" model="ir.model.data">
-            <function name="search" model="ir.model.data">
-                <value eval="[('module', '=', 'project'), ('name', '=', 'project_manager_all_project_tasks_rule')]"/>
-            </function>
-            <value eval="{'noupdate': False}"/>
-        </function>
-
-        <record id="project.project_manager_all_project_tasks_rule" model="ir.rule">
-            <field name="domain_force">[(1, '=', 1)]</field>
-            <field name="perm_read" eval="1"/>
-            <field name="perm_write" eval="1"/>
-            <field name="perm_create" eval="1"/>
-            <field name="perm_unlink" eval="1"/>
-        </record>
-
-        <function name="write" model="ir.model.data">
-            <function name="search" model="ir.model.data">
-                <value eval="[('module', '=', 'project'), ('name', '=', 'project_manager_all_project_tasks_rule')]"/>
-            </function>
-            <value eval="{'noupdate': True}"/>
+
+        <function name="write" model="ir.model.data">
+            <function name="search" model="ir.model.data">
+                <value eval="[('module', '=', 'project'), ('name', '=', 'project_manager_all_project_tasks_rule')]"/>
+            </function>
+            <value eval="{'noupdate': False}"/>
+        </function>
+
+        <record id="project.project_manager_all_project_tasks_rule" model="ir.rule">
+            <field name="domain_force">[(1, '=', 1)]</field>
+            <field name="perm_read" eval="1"/>
+            <field name="perm_write" eval="1"/>
+            <field name="perm_create" eval="1"/>
+            <field name="perm_unlink" eval="1"/>
+        </record>
+
+        <function name="write" model="ir.model.data">
+            <function name="search" model="ir.model.data">
+                <value eval="[('module', '=', 'project'), ('name', '=', 'project_manager_all_project_tasks_rule')]"/>
+            </function>
+            <value eval="{'noupdate': True}"/>
         </function>
         <record model="ir.rule" id="project.ir_rule_private_task">
             <field name="domain_force">[
@@ -279,6 +279,20 @@
                 ]
             </field>
         </record>
+        <record model="ir.rule" id="user_task_follower_view_projets_follower_required">
+            <field name="name">Project: employees: following required for follower-only projects</field>
+            <field name="model_id" ref="project.model_project_project"/>
+            <field name="domain_force">
+                [
+                            ('privacy_visibility', '=', 'followers'),
+                            ('members_ids', 'in', [user.id])
+                        ]
+            </field>
+            <field name="perm_read" eval="1"/>
+            <field name="perm_write" eval="0"/>
+            <field name="perm_create" eval="0"/>
+            <field name="perm_unlink" eval="0"/>
+        </record>
 
 <!--        <record model="ir.rule" id="timesheet_users_normal_timesheets">-->
 <!--            <field name="name">timesheet: users: see own tasks</field>-->