Only send note notifications to people accessible by the note author.

Should not make a difference most of the time, since if they're participating in the thread, they have access to the project.

app/services/notification_service.rb

@@ -130,9 +130,9 @@ class NotificationService
     # Add all users participating in the thread (author, assignee, comment authors)
     participants = 
       if target.is_a?(Commit)
-        target.participants(note.project)
+        target.participants(note.project, note.author)
       elsif target.respond_to?(:participants)
-        target.participants
+        target.participants(note.author)
       else
         note.mentioned_users
       end