SECURITY: TopicView not correctly restricting to topic