verify privacy public and site members respected on the stream

this is half coded, because blocked by dev