Pretty simple, pretty reliable. if for some reason you need to leave mass-assignment on a model. Like, say, if you use Devise