Allow commit note to be visible if repo is visible
What does this MR do?
It enforces the
:download_code permission in
Event#visible_to_user? for commit notes.
I've also added
note? && target && in
Event#project_snippet_note? for consistency with other similar methods.
Are there points in the code the reviewer needs to double check?
I think it makes sense since commits are visible if the current user has the
:download_code ability, so a note of a commit should have the same restrictions.
Closes #23824 (closed)