white list enough for active record to run