Treats null-like optional product query params as omitted and avoids department_access_0 permission checks.