[FIX] mail: avoid access issue for portal users

As portal users do not have access to activities it makes sense to
limit access to the various activity_* fields to employees only.