Bamboo "Watcher" notifications should go through a permission check

If a user has marked a plan as their favourite ad then their permissions are changes so they can't see the plan, the user is still picked up as a Watcher for that plan.

There may be a similar problem where if an invalid user commits code to a build they will also recieve notifications via the "Committers" recipient.

Example from support case:
For instance if a user watches a plan and has enabled notifications in his profile - notifications will be sent even if the user 'leaves the building' This is a potential breach and 'inactive' users should be blocked from notifications through group/user permissions.

The only way to stop is to edit the user's profile and disable sending notifications.