Update view filter for AssemblyListView

The AssemblyListView should not show assemblies to staff that they are
not member of.

Fixes #596

src/backoffice/views/assemblies/assemblies.py

@@ -32,7 +32,7 @@ class AssemblyListView(ConferenceLoginRequiredMixin, View):
 
     def get(self, *args, **kwargs):
         if self.request.user.is_authenticated:
-            myassemblies = list(Assembly.objects.associated_with_user(conference=self.conference, user=self.request.user))
+            myassemblies = list(Assembly.objects.associated_with_user(conference=self.conference, user=self.request.user, staff_can_see=False))
 
             # remove stored backlink for assembly pages from the session if it is set, so the backlink will go to the overview, which is the default
             self.request.session.pop('assembly_back', None)