Which data access control mechanism determines whether users can see a record type in the drop down list in the Search box?