Add policy check if cross reference system notes are accessible See merge request gitlab/gitlabhq!3427