not exposing DAO in api