The params[:product].permit(:name, :description, :price, :photo) is used a lot, probably want to move this into a private helper.