From 43842623aa4444fe0d659277d502d0048023274c Mon Sep 17 00:00:00 2001
From: Toby Zerner <toby.zerner@gmail.com>
Date: Tue, 24 Mar 2015 19:29:47 +1030
Subject: [PATCH] Only include visible posts in post linkage

---
 src/Api/Actions/Discussions/ShowAction.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/Api/Actions/Discussions/ShowAction.php b/src/Api/Actions/Discussions/ShowAction.php
index fcd9dfc30..47901cd6a 100644
--- a/src/Api/Actions/Discussions/ShowAction.php
+++ b/src/Api/Actions/Discussions/ShowAction.php
@@ -47,9 +47,10 @@ class ShowAction extends BaseAction
     {
         $include = $params->included(['startPost', 'lastPost', 'posts']);
 
-        $discussion = $this->discussions->findOrFail($params->get('id'), $this->actor->getUser());
+        $user = $this->actor->getUser();
 
-        $discussion->posts_ids = $discussion->posts()->get(['id'])->fetch('id')->all();
+        $discussion = $this->discussions->findOrFail($params->get('id'), $user);
+        $discussion->posts_ids = $discussion->posts()->whereCan($user, 'view')->get(['id'])->fetch('id')->all();
 
         if (in_array('posts', $include)) {
             $relations = ['user', 'user.groups', 'editUser', 'hideUser'];