@phgross I certainly think it's better to use `unrestrictedSearchResults` instead of running the test with elevated privileges. I don't quite get why it's necessary though. If the object gets added with the same user that it gets queried for, it should just work, no? What are the contents of the `allowedRolesAndUsers` index?