I'm using 2 GET operations, the first for editing with a granted role, the second for public access with a invoke controller, but you need to return a JsonResponse