only list topics that the user is allowed to see (closes #7)