diff --git a/cmd/handlers.go b/cmd/handlers.go
index b630ab1c9..0c38adb2a 100644
--- a/cmd/handlers.go
+++ b/cmd/handlers.go
@@ -156,7 +156,7 @@ func initHTTPHandlers(e *echo.Echo, app *App) {
 
 	// Individual list permissions are applied directly within handleGetLists.
 	api.GET("/api/lists", handleGetLists)
-	api.GET("/api/lists/:id", listPerm(handleGetLists))
+	api.GET("/api/lists/:id", listPerm(handleGetList))
 	api.POST("/api/lists", pm(handleCreateList, "lists:manage_all"))
 	api.PUT("/api/lists/:id", listPerm(handleUpdateList))
 	api.DELETE("/api/lists/:id", listPerm(handleDeleteLists))