Search ACLs

there is no concept of allowed properties in this module. Good to merge when this is changed.