Related Branches Visible to Guests in Issue Activity
This is related to gitlab-ce#56224
Summary
A Guest user in a private project, or a non-project member in a public project with Repository set as Project Members Only will see related branches in an issue's activity feed.
Steps to Reproduce
Private Project, Guest user
- Create a private project, and add a user as Guest
- As an authorized user, create an issue
- Within issue create related branch
- Login as user with Guest privileges and visit issue. The related branch will be seen in the activity feed.
Public Project, Repository as Project Members Only, non-project user
- Create a public project
- In project settings, set Repository to
Project Members Only - As an authorized project user, create an issue
- Within issue create related branch
- As a non-project user visit the issue. The related branch will be seen in the activity feed.