FIX: filter allowed categories from semantic search results (#206)

lib/modules/embeddings/semantic_search.rb

@@ -68,12 +68,15 @@ module DiscourseAi
             offset: offset,
           )
 
-        ::Post
+        semantic_results =
-          .where(post_type: ::Topic.visible_post_types(guardian.user))
+          ::Post
-          .public_posts
+            .where(post_type: ::Topic.visible_post_types(guardian.user))
-          .where("topics.visible")
+            .public_posts
-          .where(topic_id: candidate_topic_ids, post_number: 1)
+            .where("topics.visible")
-          .order("array_position(ARRAY#{candidate_topic_ids}, topic_id)")
+            .where(topic_id: candidate_topic_ids, post_number: 1)
+            .order("array_position(ARRAY#{candidate_topic_ids}, topic_id)")
+
+        guardian.filter_allowed_categories(semantic_results)
       end
 
       private

spec/lib/modules/embeddings/semantic_search_spec.rb

@@ -106,6 +106,38 @@ RSpec.describe DiscourseAi::Embeddings::SemanticSearch do
           expect(posts).not_to include(post_2)
         end
       end
+
+      context "when the post belongs to a secured category" do
+        fab!(:group) { Fabricate(:group) }
+        fab!(:private_category) { Fabricate(:private_category, group: group) }
+
+        before do
+          post.topic.update!(category: private_category)
+          stub_candidate_ids([post.topic_id])
+        end
+
+        it "returns an empty list" do
+          posts = subject.search_for_topics(query)
+
+          expect(posts).to be_empty
+        end
+
+        it "returns the results if the user has access to the category" do
+          group.add(user)
+
+          posts = subject.search_for_topics(query)
+
+          expect(posts).to contain_exactly(post)
+        end
+
+        context "while searching as anon" do
+          it "returns an empty list" do
+            posts = described_class.new(Guardian.new(nil)).search_for_topics(query)
+
+            expect(posts).to be_empty
+          end
+        end
+      end
     end
   end
 end