[ticket/420] Properly check permissions for news module

- [*] Add tests for properly checking permissions
- [ ] Fix bug that causes news module to display topics it shouldn't

Fixes #420