Fix dataLists list-all API to work correctly with private sites