Merge branch 'security-fix/security-group-user-removal-11-6' into 'security-11-6'
[11.6] Resolve "Removing a user from a private group doesn't remove them from group's project, if their project's role was changed" See merge request gitlab/gitlabhq!2716