It looks like you are trying to enforce a strong parameters type of protection here.  I think we need to add a spec that explicitly tests that a user is not able to edit some attributes that they aren't supposed to be able to edit.