1. The user is a system administrator. System Administrators have access to all records regardless of Site.
2. Site security is not enabled for search lists. To enable site security see How to enable site security in search lists
Download and install the latest patch, which contains all fixes from previous patches. If you are running an older version, download and install the latest version and then the patch.