service: permission: add unlisted tag check for can_search

Author: yashlamba

invenio_vocabularies/services/generators.py

@@ -27,6 +27,8 @@ def __init__(self, tags, then_, else_):
 
     def _condition(self, record=None, **kwargs):
         """Check if the record has the tags."""
+        if not record:
+            return False
         return any(tag in record.get("tags", []) for tag in self.tags)
 
     def query_filter(self, **kwargs):

invenio_vocabularies/services/permissions.py

@@ -17,7 +17,10 @@
 class PermissionPolicy(RecordPermissionPolicy):
     """Permission policy."""
 
-    can_search = [SystemProcess(), AnyUser()]
+    can_search = [
+        SystemProcess(),
+        IfTags(["unlisted"], then_=[SystemProcess()], else_=[AnyUser()]),
+    ]
     can_read = [
         SystemProcess(),
         IfTags(["unlisted"], then_=[SystemProcess()], else_=[AnyUser()]),