Issue Summary

Subscribing to your search results, e-mail the result despite having no permissions to the projects 'NOT IN' contains

This is reproducible on Data Center: yes

Steps to Reproduce

1. Create user1 who have no permissions to project1.
2. Create filter1 which include 'NOT IN project1'.
3. user1 subscribe filter1
4. user1 get the search result by email.

sample

resolution = Unresolved AND project not in ("SAMPLE")

Expected Results

user1 cannot get the search result by email or can see the result in Search page.

Actual Results

user1 can get the search result by email.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available