This change prevents the application from loading vulnerability feedback
on single Merge Request page when user is unauthorized to read that
information.