Hide source button when an activity is not public

templates/utils.html

@@ -321,6 +321,7 @@
 
 {% endif %}
 
+{% if meta.object_visibility | visibility_is_public %}
 {% if obj | url_or_id | is_from_outbox %}
 <a class="bar-item" href="{{ obj | url_or_id | get_url }}">permalink</a> 
 {% else %}
@@ -329,6 +330,7 @@
 {% if session.logged_in %}
 <a class="bar-item bar-item-no-border">{{ meta.object_visibility | visibility }}</a>
 {% endif %}
+{% endif %}
 
 </div>