Public search query: how to debug RBAC forbidden errors after upgrades