RY displays requirement content to users who have no permissions to view a space

Steps to reproduce:

• Create Confluence space A

• Confluence space B

• Define a requirement REQ-001 in space A

• Create a link to REQ-001 from a page in space B

• Give user X only access to space B, not to space A

Expected behaviour:

• User X does not see content of REQ-001.

Actual behaviour:

• User X sees content of REQ-001 in RY popup.