API. Filter relations

check maybe public or authenticated