Fix private data requests access control