Users who contribute to a page (watch/upload attachment) get comment notification even the page have been restricted to only some user.

A user without access to the page still received notification for an in-line comment on this page.
The notification was received in the notifications box, not via email.

Steps to reproduce

1. Create a page.
2. Get multiple users to watch/upload attachments to the page.
3. Restrict the page to only some user.
4. Comment on the page.

Expected Result
Only the user who have edit/view restriction of the page will get workbox notification of the comment.

Actual Result
All user who watch/upload attachments to the page will receive workbox notification of the comment.