commenting attr_accessible from permission.rb