Changeset comments appear in activity stream even when the user does not have permission to see that repository, or the repository is disabled

When a constraint exists which shows only part of a repository (e.g. when viewing a user's activity) exclusions of changset comments from other repositories (because they are disabled, or because the current user doesn't have permission) are not applied.