Comment Comment by callumjones Because it's really the Model's job to determine what is safe and unsafe for mass assignment, not the controller's. parent callumjones 14 years ago