Apply ACL restriction filters for a search query

I not a big fan of burying the "actif" role constraint inside this, it's better to have the intent visible.