`rating` needs validation