Filter changes browsing by ACL

Signed-off-by: Michal Čihař <michal@cihar.com>

weblate/trans/views/changes.py

@@ -128,6 +128,16 @@ class ChangesView(ListView):
 
         result = Change.objects.prefetch()
 
+        # Filter by ACL
+        acl_projects, filtered = Project.objects.get_acl_status(
+            self.request.user
+        )
+        if filtered:
+            result = result.filter(
+                Q(translation__subproject__project__in=acl_projects) |
+                Q(dictionary__project__in=acl_projects)
+            )
+
         if self.translation is not None:
             result = result.filter(
                 translation=self.translation