app.log.apiDql configuration to enable API DQL logs
fixed a problem in permission verification of private metadata when user is not logged in