Check whether the user can read the replies and allow filtering the reply count in plugins

src/socket.io/posts.js

@@ -127,6 +127,9 @@ SocketPosts.getReplies = function (socket, pid, callback) {
 		function (next) {
 			posts.getPidsFromSet('pid:' + pid + ':replies', 0, -1, false, next);
 		},
+		function (pids, next) {
+			privileges.posts.filter('read', pids, socket.uid, next);
+		},
 		function (pids, next) {
 			async.parallel({
 				posts: function (next) {