fuzzy query :permission control