Description of problem:

Adding the "filter:true" to HTTP request for non-admin user for REST API and requesting a specific vm by using /api/vms?search={query} returns wrong result, instead of that specific vm you get all vms on oVirt.

However search works fine using admin user where you don't need to send filter:true header. 


Version-Release number of selected component (if applicable):

oVirt Engine
3.5.0.1-1.el6

How reproducible:

Send search request /api/vms?search={query} 


Steps to Reproduce:
1. Create more then one VM on your oVirt

2. curl http://{engine_ip}/api/vms?search=name%3D{vm_name} -u "alt@internal":XXXX -H "filter: true" -H "Accept-Encoding: identity" -H "Prefer: persistent-auth" -H "Content-type: application/xml" -H "Accept: application/xml" -k -i -v


Actual results:

All VM:s are returned 

Expected results:

Only the specified vm 

Additional info:

This error occurs also for  "/api/templates?search={query}"

However search works fine using admin user where you don't need to send filter:true header.