#7 all validation calls should be public