elasticsearch: note and snippet search as an auditor doesn't work

Uses the admin? rather than the admin_or_auditor? access check.