Show activity/projects depends on access

app/views/groups/show.html.haml

@@ -16,22 +16,26 @@
 
   = render 'shared/show_aside'
 
-  .row
-    %section.activities.col-md-7
-      .hidden-xs
-        - if current_user
-          = render "events/event_last_push", event: @last_push
+  - if can?(current_user, :read_group, @group)
+    .row
+      %section.activities.col-md-7
+        .hidden-xs
+          - if current_user
+            = render "events/event_last_push", event: @last_push
 
-          %ul.nav.nav-pills.event_filter.pull-right
-            %li
-              = link_to group_path(@group, { format: :atom, private_token: current_user.private_token }), title: "Feed", class: 'rss-btn' do
-                %i.fa.fa-rss
+            %ul.nav.nav-pills.event_filter.pull-right
+              %li
+                = link_to group_path(@group, { format: :atom, private_token: current_user.private_token }), title: "Feed", class: 'rss-btn' do
+                  %i.fa.fa-rss
 
-          = render 'shared/event_filter'
-          %hr
+            = render 'shared/event_filter'
+            %hr
 
-      .content_list
-      = spinner
-    - if @projects.any?
+        .content_list
+        = spinner
       %aside.side.col-md-5
         = render "projects", projects: @projects
+  - else
+    %p
+      = icon('lock')
+      This is a private group