Merge branch 'security-12630-private-system-note-disclosed-in-graphql-12-1-ce' into '12-1-stable'
Add policy check if cross reference system notes are accessible See merge request gitlab/gitlabhq!3428
Add policy check if cross reference system notes are accessible See merge request gitlab/gitlabhq!3428