This article describes how to bypass Rails 4 forbidden attributes in the controller or Rails 3 mass assignment protection for one time. http://solidfoundationwebdev.com/blog/posts/how-to-bypass-rails-forbidden-attributes-or-mass-assignment-protection-for-one-time