diff --git a/src/ajax.php b/src/ajax.php
index dee6f66..cf403bd 100644
--- a/src/ajax.php
+++ b/src/ajax.php
@@ -22,10 +22,12 @@ $db = DBConnection::instance();
 if(isset($_GET['loadLists']))
 {
 	check_token();
-	if (!is_logged()) $sqlWhere = 'WHERE published=1';
-	else $sqlWhere = '';
 	$t = array();
-	$t['list'][] = prepareAllTasksList();
+	if (!is_logged()) $sqlWhere = 'WHERE published=1';
+	else {
+		$sqlWhere = '';
+		$t['list'][] = prepareAllTasksList(); // show alltasks lists only for authorized user
+	}
 	$t['total'] = 1;
 	$q = $db->dq("SELECT * FROM {$db->prefix}lists $sqlWhere ORDER BY ow ASC, id ASC");
 	while($r = $q->fetchAssoc())