Make haystack respect permissions