[api_resource] revert public to protected