There should be a non-admin super user with full permission to search all candidates but not the ability to change user permissions. Currently only Admins can search all candidates.