closes #2995

src/privileges/topics.js

@@ -72,22 +72,42 @@ module.exports = function(privileges) {
 			return callback(null, []);
 		}
 
-		topics.getTopicsFields(tids, ['tid', 'cid'], function(err, topics) {
+		async.waterfall([
-			if (err) {
+			function(next) {
-				return callback(err);
+				topics.getTopicsFields(tids, ['tid', 'cid', 'deleted'], next);
-			}
+			},
-
+			function(topicsData, next) {
-			var cids = topics.map(function(topic) {
+				var cids = topicsData.map(function(topic) {
 					return topic.cid;
+				}).filter(function(cid, index, array) {
 				});
 
-			privileges.categories.filterCids(privilege, cids, uid, function(err, cids) {
+				async.parallel({
+					categories: function(next) {
+						categories.getMultipleCategoryFields(cids, ['disabled'], next);
+					},
+					allowedTo: function(next) {
+						helpers.isUserAllowedTo(privilege, uid, cids, next);
+					},
+					isModerators: function(next) {
+						user.isModerator(uid, cids, next);
+					},
+					isAdmin: function(next) {
+						user.isAdministrator(uid, next);
+					}
+				}, function(err, results) {
 					if (err) {
 						return callback(err);
 					}
+					var isModOf = {};
+					cids = cids.filter(function(cid, index) {
+						isModOf[cid] = results.isModerators[index];
+							(results.allowedTo[index] || results.isAdmin || results.isModerators[index]);
+					});
 
-				tids = topics.filter(function(topic) {
+					tids = topicsData.filter(function(topic) {
-					return cids.indexOf(topic.cid) !== -1;
+						return cids.indexOf(topic.cid) !== -1 &&
+							(parseInt(topic.deleted, 10) !== 1 || results.isAdmin || isModOf[topic.cid]);
 					}).map(function(topic) {
 						return topic.tid;
 					});
@@ -97,10 +117,11 @@ module.exports = function(privileges) {
 						uid: uid,
 						tids: tids
 					}, function(err, data) {
-					callback(err, data ? data.tids : null);
+						next(err, data ? data.tids : null);
-				});
 					});
 				});
+			}
+		], callback);
 	};
 
 	privileges.topics.canEdit = function(tid, uid, callback) {