allow * or empty filters for search permissions