more work on search permissions