enforcing protections on internal methods in controllers