Problem Definition

When mentioning users in a restricted comment, the list will include users that are not part of the Project Role/Group associated to the restricted comment. Due to security design, if the user is not part of the Project Role/Group of the restricted comment, they will not receive the email notification.

The problem is that the email will be silently dropped with no prior warning/message.

Suggested Solution

In the mention list, exclude or have something to indicate users that are not part of the restricted comments.

Alternatively, have some warning/message that the mentioned user will not receive the email notification due to them not part of the restricted comment.

Workaround

None