Merge branch 'security-2853-prevent-comments-on-private-mrs-12-2' into '12-2-stable'
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3324
Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3324