---
title: Ensure only authorised users can create notes on Merge Requests and Issues
type: security