[ticket/420] Properly check permissions for news module

- [x] Add tests for properly checking permissions
- [ ] Fix bug that causes news module to display topics it shouldn't

Fixes #420