Merge branch 'security-disallow-read-user-scope-to-read-project-events-11-9' into '11-9-stable'
Disallow read user scope to read project events See merge request gitlab/gitlabhq!3088
Disallow read user scope to read project events See merge request gitlab/gitlabhq!3088