Moving issues in milestone view without rights

I am able to move an issue to another list (e.g. from onoging to unstarted) although i have only read-only access to the project. The move of an issue is only temporarily and will not saved.

Steps to reproduce:

1. Login/Signup as a user which has read-only access to some project (e.g. https://gitlab.com/gitlab-org/gitlab-ce)
2. Open a milestone (e.g. https://gitlab.com/gitlab-org/gitlab-ce/milestones/20)
3. Move some issue between lists

Issue #13668 (closed) seems to be related