show the lesson if it's published or user is admin