“Service Desk” is visible for non project-members

Summary

Non project members can see the “Service desk” tab on a project and even the “Turn on Service Desk” button although the functionality is disabled.

Steps to reproduce

Create an internal project. Register a new user account and access the project. Open the “Issues → Service Desk” section.

Example Project

https://gitlab.com/fusonic/fcp/fcp/issues/service_desk

What is the current bug behavior?

Section is visible.

What is the expected correct behavior?

If Service Desk is disabled, the section should only be visible for people who have permission to enable it.