My Air/flex app is a sort of image file browser.

Image urls stored in a mySQL db and php script that returns them to the air app.

Some users will need access to certain modules of images. E.g Sports images, Nature.

My plan is to use a tree component to restrict the user to just the modules they are allowed access too. My problem comes with the generic search text box in the corner.

How can i stop a user searching and returning results for "football" if they are only allowed access to the nature module.

I have a feeling my implementation is not correct for modular access.

Can anyone offer any advice?