Merge branch 'security-2853-prevent-comments-on-private-mrs-12-1' into '12-1-stable'
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3307
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3307