Well, I like whitelisting attributes in any controller, be it an admin controller or not. But I understand it can be "less" needed in this scenario.

Your call then :smile: