Merge pull request #11176 from neinteractiveliterature/search-fixes

Don't attempt to show search results the user can't view

Author: nbudin

app/graphql/types/search_result_type.rb

@@ -1,5 +1,11 @@
 # frozen_string_literal: true
 class Types::SearchResultType < Types::BaseObject
-  field :entries, [Types::SearchResultEntryType], null: false
-  field :total_entries, Int, null: false
+  description "A paginated search result containing matching entries and total count"
+
+  field :entries, [Types::SearchResultEntryType], null: false, description: "The results of the search"
+  field :total_entries, Int, null: false, description: "The total number of entries matching the search query"
+
+  def entries
+    object.entries.filter { |entry| policy(entry.model).read? }
+  end
 end