Hi John,

thanks for checking into it.

I am unsure about the security implications of the change,
because I do not have much experience with it.
Ralf probably does.

Of course an anonymous user should only be able to search
the issues that it has also read access (aka "View") to.

Best,
Bernhard