Description of problem:

Autocomplete in search boxes seems to ignore users' permissions, possibly showing things the users wouldn't be allowed to see otherwise.

How reproducible:

Always

Is this issue a regression from an earlier version:

Most likely not

Steps to Reproduce:

1. Create domain called foo
2. Create a domain called bar
3. Create a role
4. Add view_domains permission to it, limit it by search to name ~ f*
5. Create a user
6. Give the role to the user
7. Log in as user
8. Go to infrastructure > domains
9. Put {{name = }} into the search bar

Actual behavior:
Autocomplete offers both bar and foo domains.

Expected behavior:
Autocomplete offers only domain foo.