Use allowed attr in stock items controller [backend]