[fix] Feed listing based on permissions