The Query Time Authorization API filters search results and access to document information at query time. Query time filtering can be used in addition to, or in place of ACLs.