exclude posts of survey with private locations

src/Ushahidi/Modules/V5/Actions/Post/Queries/PostsStatsQuery.php

@@ -24,9 +24,10 @@ public function getSearchFields()
         return $this->search_fields;
     }
 
-    public static function fromRequest(Request $request): self
+    public static function fromRequest(Request $request, array $surveys_with_private_location = []): self
     {
-
+        $post_search_fields = new PostStatsSearchFields($request);
+        $post_search_fields->excludeFormIds($surveys_with_private_location);
         return new self(new PostStatsSearchFields($request));
     }
 }

src/Ushahidi/Modules/V5/Http/Controllers/PostController.php

@@ -45,11 +45,11 @@
 class PostController extends V5Controller
 {
 
-     // It uses methods from several traits to check access:
+    // It uses methods from several traits to check access:
     // - `AdminAccess` to check if the user has admin access
     use AdminAccess;
 
-    
+
     /**
      * Not all fields are things we want to allow on the body of requests
      * an author won't change after the fact, so we limit that change
@@ -354,15 +354,26 @@ public function delete(int $id, Request $request)
 
     public function stats(Request $request)
     {
-        $stats = $this->queryBus->handle(PostsStatsQuery::FromRequest($request));
+        $surveys_with_private_location  = $this->queryBus->handle(new GetSurveyIdsWithPrivateLocationQuery());
+        if ($this->canUserseePostsWithPrivateLocation()) {
+            $stats = $this->queryBus->handle(PostsStatsQuery::FromRequest($request));
+        } else {
+            $stats = $this->queryBus->handle(
+                PostsStatsQuery::FromRequest(
+                    $request,
+                    $surveys_with_private_location->pluck('id')->toArray()
+                )
+            );
+        }
+
         return new PostStatsResource($stats);
     }
 
     public function indexGeoJson(Request $request): PostGeometryCollection
     {
 
         $surveys_with_private_location  = $this->queryBus->handle(new GetSurveyIdsWithPrivateLocationQuery());
-        
+
         if ($this->canUserseePostsWithPrivateLocation()) {
             $posts = $this->queryBus->handle(ListPostsGeometryQuery::FromRequest($request));
         } else {
@@ -373,7 +384,7 @@ public function indexGeoJson(Request $request): PostGeometryCollection
                 )
             );
         }
-        
+
         return new PostGeometryCollection($posts);
     }