fix #386; only send publish notifications to users who can see results