Agreed. Where are the surrounding textSearch calls coming from that check permissions? I'm only seeing the call that doesn't do it, i.e. `def textSearch(self, query, project):`