Group milestones permissions were being delegated to project and
returning false for `:read_milestone` ability.