search permission tests for post-publish