use acl to check perms for curator search