query* requires "r" permissions; added distinct