Additional permission parameter for Search ACLs

It should be an object and not an array