Security issue (redmine 4.1.1)

[ilovetacos]

Although it works on 4.1.1 there is a big security issue: non admin users get to see the whole bunch of projects (they don't have access, but still...). This definitely shouldn't be happening.