add search permission for auth users