[Zope] permissions question

Hi everybody! Is there anyone who can tell me what the permission 'Change configuration' is for? And what about 'Search ZCatalog'. I created a user who didn't have that permission. But that user still can use the search form and search the catalog. Does anyone know how to create users that can't search a catalog? Thanks in advance Katrin