Reproduction in cms as follows:
1) Log in a 'editor'
2) Do a search on 'test'
3) Log in in different browser as admin. Add a new document type and add a document of this type with content 'test'
4) assert that if you search with 'admin' you can find the document in the cms
5) assert that with 'editor' you do not find the document
When the editor logs out and in again, the document will be found by a search. This is because for a new session, a new authorization query is created taking the new nodetype into account in the authorization query.
For reproduction in site, see
HSTTWO-3585 with the ?_nodetype=myhippoproject:newtype