code: func (e *engineImpl) queryEnabledVisibleJobs(c context.Context, q *ds.Query) ([]*Job, error) {
  	entities := []*Job{}
  	if err := ds.GetAll(c, q, &entities); err != nil {
  		return nil, transient.Tag.Apply(err)
  	}
  	// Non-ancestor query used, need to recheck filters.
  	enabled := make([]*Job, 0, len(entities))
  	for _, job := range entities {
  		if job.Enabled {
  			enabled = append(enabled, job)
  		}
  	}
  	// Keep only ones visible to the caller.
  	return e.filterForRole(c, enabled, acl.Reader)
  }
docs: // queryEnabledVisibleJobs fetches all jobs from the query and keeps only ones
  // that are enabled and visible by the current caller.