This is looks as a very severe bug, so apologies if someone already posted it, but I don’t know how to search for it. Here it goes:
The bug
Given I’m user who is not in the group staff,
When I go to the main listing of topics - / root of the discourse,
Then I see even the topics, that should be hidden to me, because I don’t have read privileges for them.
Also, in the listing, I can see the topic title, but the topic category is hidden.
When I click on the topic, that should be hidden, only header will remain, with the rest of the page blank with this error in console:
Uncaught TypeError: Cannot read property '__ember_meta__' of undefined vendor-0cf7f8ddcf2bd3b5854f3b875e88d515.js:6
Version: 0.9.9.11