guest users can read merge requests
Created by: gordonmleigh
The whole point of the 'guest' user level is to stop those users having access to the code. However, they can still view merge requests and even diffs (which are obviously pieces of code).
Is this intended? What's the rationale?