I don't think this is correct as the global admin will now no longer be able to search public resources.

We'd want to have something like:

```javascript
if (ctx.user() && ctx.user().isGlobalAdmin()) {
    filter = SearchUtil.filterAnd(
        baseFilter,
        (!opts.includeExternal) ? SearchUtil.filterTerm('tenantAlias', ctx.tenant().alias) : null,
    );
}
```