Search permissions

closes #45 (closed) but without a sql permissions calculator.

the search fetches a list of channels the user can read and adds that list as a filter to the WHERE clause.