fixes for display and search privacy enforcement
one more edge case in the public perms - don't match perms = 0 which is private, this and prior checkin are for issue #114