Only ignore user permissions through a field the user can type in

fix(search): only ignore user permissions through a field the user can type in