path-filter: enable for quick search menu.

rhodecode/apps/_base/__init__.py

@@ -320,9 +320,15 b' class PathFilter(object):'
         self.permission_checker = permission_checker
 
     def assert_path_permissions(self, path):
-        if path and self.permission_checker and not self.permission_checker.has_access(path):
-            raise HTTPForbidden()
-        return path
+        if self.path_access_allowed(path):
+            return path
+        raise HTTPForbidden()
+
+    def path_access_allowed(self, path):
+        log.debug('Checking ACL permissions for PathFilter for `%s`', path)
+        if self.permission_checker:
+            return path and self.permission_checker.has_access(path)
+        return True
 
     def filter_patchset(self, patchset):
         if not self.permission_checker or not patchset:

rhodecode/apps/repository/views/repo_files.py

@@ -904,9 +904,11 b' class RepoFilesView(RepoAppView):'
                 raise HTTPFound(h.route_path(
                     'repo_files', repo_name=self.db_repo_name,
                     commit_id='tip', f_path='/'))
+
             return _d + _f
 
-        return compute_file_search(self.db_repo.repo_id, commit_id, f_path)
+        result = compute_file_search(self.db_repo.repo_id, commit_id, f_path)
+        return filter(lambda n: self.path_filter.path_access_allowed(n['name']), result)
 
     @LoginRequired()
     @HasRepoPermissionAnyDecorator(