For the aPriori Professional Search tool, access control checks are performed when you try to open an entity that appears in the search results, not when the search is run.
When you use Search, all scenarios that meet the search criteria are displayed, just the same as if access control has not been implemented at your site. Even if an entity does not have read permission for your user profile, it is listed in the Component Scenarios area. However, only a small sub-set of its fields are displayed; no cost data is shown, and no thumbnail is displayed. This approach strikes a balance between performance and security. To perform comprehensive access control checks during the search, aPriori Professional would need to load everything and check it, which might cause unacceptable delays.
When you place the cursor over such an entity, a tooltip message appears informing you that you do not have access to the component.
When you try to open such an entity, aPriori Professional displays an access error message
Note: This behavior is observed wherever search is used in aPriori Professional for example, switching components in Assemblies, deleting components and adding components to Roll-ups.