Project members who don't have access to Feature Flags see the feature flag link in the Search Bar
See !42023 (comment 413645737)
Should we fix it to
can?(current_user, :read_feature_flags, @project)
? So that users who don't have access to the feature flags don't see the autocompleted link? This can be a follow-up, I think.
This is not a security issue since FeatureFlagController authorizes each user if s/he has access. This is more like UX issue.
Edited by Shinya Maeda