Alomost every item is marked as private or public. So filtering happens based on api key. As of now I pass it as request parameter.