Fix feed visibility

wrong auth call caused the read permission to be not checked, thus feeds were not correctly filtered. (```!:object``` evaluates to false)