Previously not all data on the roadmap and version view where properly checked against the issue visibility setting. Unprivileged users were able to see the total number of issues, their estimations and the open/close status - even if the user was only allowed to see their own issues.
Patch by Gregor Schmidt.
Related issues
Patch #27676: Information leak on roadmap and versions view
Adds visibility checks on version views (#27676).
Previously not all data on the roadmap and version view where properly
checked against the issue visibility setting. Unprivileged users were
able to see the total number of issues, their estimations and the
open/close status - even if the user was only allowed to see their own issues.
Patch by Gregor Schmidt.