extract params to PermittedParams class