Implement access controls for queries (bucket permissions for Index, bubbled up permissions for index aliases)