Groups of users (access role groups) could be allowed or prevented via the access control settings to be able to search deaccessioned records.
Belkin and Western Front
Implemented via new user actions can_access_deaccessioned_ca_collections, can_access_deaccessioned_ca_object_lots and can_access_deaccessioned_ca_objects