In fact I really need a way to express grant access to "every entry below a certain branch" AND "responding to the this search criteria" to somebody I am not sure how I can do that...