diff --git a/src/Api/Controller/ListPostsController.php b/src/Api/Controller/ListPostsController.php index 383d55390..977dfdcf3 100644 --- a/src/Api/Controller/ListPostsController.php +++ b/src/Api/Controller/ListPostsController.php @@ -108,12 +108,13 @@ class ListPostsController extends AbstractListController */ private function getPostIds(ServerRequestInterface $request) { + $actor = $request->getAttribute('actor'); $filter = $this->extractFilter($request); $sort = $this->extractSort($request); $limit = $this->extractLimit($request); $offset = $this->extractOffset($request); - $query = $this->posts->query(); + $query = $this->posts->query()->whereVisibleTo($actor); $this->applyFilters($query, $filter);