enforcing passing of dat to controller only