Users can see their own posts when those posts are whispers, even if they do not have enough privileges to use whispers

[nat (<b>Natalie T)]

This has been fixed as part of SECURITY: Don't display user's old whispers if not in allowed group · discourse/discourse@0b1dd04 · GitHub.