The same as with with repository upload, the fact that I have rights for routes it's not enough. Searching for the @view/@filter should be also scoped based on the rights I have,shouldn't it?