     options.group       = client.context.group
     options.fallbackFn  = @fetchRandomUsers
 
-    Cache.fetch "activeItems.fetchUsers", (@_fetchUsers.bind this), options, callback
+    JGroup.canListMembers client, (err, hasPermission)=>
+      if err or not hasPermission
+        return callback new Error "Not allowed to list members of this group"
+      Cache.fetch "activeItems.fetchUsers", (@_fetchUsers.bind this), options, callback
 
   @fetchRandomUsers = (callback)-> JAccount.some {}, {limit:10}, callback
 

    options.group      = client.context.group
    options.fallbackFn = @fetchRandomTopics
    cacheId            = "#{options.group}-activeItems.fetchTopics"
    Cache.fetch cacheId, (@fetchItems.bind this), options, callback

  # Returns users in following order:
  #   * Client's followers who are online


module.exports = class ActiveItems extends Base
  @share()
  JPermissionSet = require './group/permissionset'
  JGroup         = require './group'

  @set
    sharedMethods   :
