You can see the notes of private projects made by someone else

Unlike project contents, the notes of private projects are visible to everyone. This compromises the privacy of someone else.

Steps to reproduce:

  1. Go to an existent private project, like this one.
  2. Look at the notes.

Observed Behavior:
You can look at the notes of the private projects.

Expected Behavior:
Notes of private projects can only be seen by the owner.

Relates to I can see project pages for projects that are unshared or don't exist.

Good catch. I've just pushed a fix. Please let me know if it solved the issue for you too :slight_smile: