Per-database authorisation done at search time.