Merge branch 'security-fix/security-group-user-removal-11-4' into 'security-11-4'
[11.4] Resolve "Removing a user from a private group doesn't remove them from group's project, if their project's role was changed" See merge request gitlab/gitlabhq!2714