Merge request discussion cache causes resolve permissions to be stale
In MR discussions, a Developer can resolve any note while a Guest can only resolve notes that they authored.
When the user's permission is changed, the cache is not invalidated. So if a Developer is downgraded to Guest, the Resolve button is still shown but does nothing (fails on the backend).
The opposite can also happen. A user could be upgraded from Guest to Developer and the resolve buttons won't be visible.