api v1 controller - protected methods fix