User who is not a member of project can see and press "Resolve thread" button, but it fails with 404 without any UI feedback
Summary
On one of my test projects, my official GitLab account @mvanremmerden is the owner and only member of that project. When I visit an individual issue with my second test account @mvremmerden, I can still see the "Resolve thread" button, but clicking on it gives me a 404.
Another example in the form of the checkbox:
Neither @.luke, @alexkalderimis nor @pedroms can see this button, even though they are also not members of this project.
/cc @m_gill
Edited by Michelle Gill