Limit last changes to projects user is allowed to access

weblate/trans/views.py

@@ -79,6 +79,7 @@ def home(request):
     and user links if logged in.
     '''
     projects = Project.objects.all_acl(request.user)
+    acl_projects = projects
     if projects.count() == 1:
         projects = SubProject.objects.filter(project=projects[0])
 
@@ -104,7 +105,9 @@ def home(request):
     # Some stats
     top_translations = Profile.objects.order_by('-translated')[:10]
     top_suggestions = Profile.objects.order_by('-suggested')[:10]
-    last_changes = Change.objects.order_by('-timestamp')[:10]
+    last_changes = Change.objects.filter(
+        translation__subproject__project__in=acl_projects,
+    ).order_by( '-timestamp')[:10]
 
     return render_to_response('index.html', RequestContext(request, {
         'projects': projects,