check err

src/posts.js

@@ -164,20 +164,19 @@ var db = require('./database'),
 
 			async.filter(pids, function(pid, next) {
 				postTools.privileges(pid, callerUid, function(err, privileges) {
-					next(privileges.read);
+					next(!err && privileges.read);
 				});
 			}, function(pids) {
 				if (!(pids && pids.length)) {
 					return callback(null, { posts: [], nextStart: 0});
 				}
 
-
 				Posts.getPostSummaryByPids(pids, false, function(err, posts) {
 					if (err) {
 						return callback(err);
 					}
 
-					if(!posts || !posts.length) {
+					if (!Array.isArray(posts) || !posts.length) {
 						return callback(null, { posts: [], nextStart: 0});
 					}