diff --git a/src/main/java/org/websoso/WSSServer/auth/validator/FeedAccessValidator.java b/src/main/java/org/websoso/WSSServer/auth/validator/FeedAccessValidator.java index 612167f1..49f9a901 100644 --- a/src/main/java/org/websoso/WSSServer/auth/validator/FeedAccessValidator.java +++ b/src/main/java/org/websoso/WSSServer/auth/validator/FeedAccessValidator.java @@ -26,7 +26,7 @@ public boolean canAccess(Long feedId, User user) { return true; } - if (feed.getIsHidden()) { + if (feed.getIsHidden() || !feed.isVisibleTo(user.getUserId())) { throw new CustomFeedException(HIDDEN_FEED_ACCESS, "Cannot access hidden feed."); }