permitted params for new attributes