This is okay as a first step, but we should really be using strong parameters http://guides.rubyonrails.org/action_controller_overview.html#strong-parameters You can create another story to do that if you would like.