gitlab-org--gitlab-foss/changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml

---
title: Issuable no longer is visible to users when project can't be viewed
merge_request:
author:
type: security
Adds validation to check if user can read project An issuable should not be available to a user if the project is not visible to that specific user 2018-12-07 10:48:38 -05:00			`---`
			`title: Issuable no longer is visible to users when project can't be viewed`
			`merge_request:`
			`author:`
			`type: security`