Show list if private and list's owner, or if list is public; otherwise 404.