Protected invoice items controller