[BUGFIX] Use proper Doctrine DBAL Statement in sys_note repository

Resolves: #104884
Related: #104844
Releases: main
Change-Id: I6361b841eededc837702f9fbe61c236c7502abd0
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/85994


Tested-by: Benni Mack <benni@typo3.org>
Tested-by: Stefan Bürk <stefan@buerk.tech>
Reviewed-by: Frank Nägler <frank.naegler@typo3.com>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Stefan Bürk <stefan@buerk.tech>
Tested-by: Frank Nägler <frank.naegler@typo3.com>

typo3/sysext/sys_note/Classes/Domain/Repository/SysNoteRepository.php

@@ -83,10 +83,6 @@ class SysNoteRepository
 
     /**
      * Find notes by given category but restricted to backend user permissions
-     *
-     * @param int $category Category id
-     *
-     * @return array
      */
     public function findByCategoryRestricted(?int $category = null): array
     {
@@ -112,8 +108,10 @@ class SysNoteRepository
             );
         }
 
+        $statement = $queryBuilder->executeQuery();
+
         $results = [];
-        foreach ($queryBuilder->executeQuery()->fetchAllAssociative() as $result) {
+        while ($result = $statement->fetchAssociative()) {
             if ($this->checkPermissions($result)) {
                 $results[] = $result;
             }