Protect mass assignment