Merge branch 'security-2853-prevent-comments-on-private-mrs-12-0' into '12-0-stable'
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3308
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3308