Merge branch 'security-2776-fix-add-reaction-permissions-11-7' into 'security-11-7'
[11.7] Revoke award_emoji permissions for confidential issues See merge request gitlab/gitlabhq!2849 (cherry picked from commit 0ead6f886e437d3a99c22e0adf85f768d8293cad) 0be8c4c9 Prevent award_emoji to notes not visible to user