Redmine

Okay, here's the case. User Alice creates a ticket in Project X. Manager Bob comes along and realizes that this ticket would be better addressed elsewhere, so he moves it to private Project Y. Alice doesn't have access to view Project Y and can't, as a result, see her ticket anymore.

That's all well and good, but on /my/page in the Reported issues block, she sees her ticket with a link (that 403's on her).

I think we can agree that she shouldn't be able to see the ticket (it would reveal possibly private categories, affected versions, etc), but shouldn't this mean it shouldn't display elsewhere to her?