Check that user has access to a given namespace to prevent leaking namespace names.

See merge request !2009