forward porting ems badge viewing permission fix

docs/changelog/7.x.x.txt

@@ -19,6 +19,7 @@
  - fixed #9191: Message Board reveals user email, ignores profile privacy setting (#9180)
  - fixed #4209: i18n in Rich edit in Dutch breaks
  - fixed #9196: Shelf lacks pagination
+ - fixed #4208: EMS badges with Admin security visible to all
 
 7.6.4
  - Survey now will show progress and time limit.

lib/WebGUI/Asset/Wobject/EventManagementSystem.pm

@@ -824,7 +824,8 @@ sub www_getBadgesAsJson {
     my ($db, $form) = $session->quick(qw(db form));
     my %results = ();
     $results{records} = [];
-	foreach my $badge (@{$self->getBadges}) {
+	BADGE: foreach my $badge (@{$self->getBadges}) {
+        next BADGE unless $badge->canView;
 		push(@{$results{records}}, {
 			title 				=> $badge->getTitle,
 			description			=> $badge->get('description'),