title: Strong Parameters in Rails 3.2.8
body: <p><a href="http://vimeo.com/51181496" rel="noreferrer">This video</a> states that it is possible to protect the input coming in via the controller yet still be able to do mass assignment via models and specs.  However, I have not seen this documented as a feature when using strong_parameters in 3.2.8.</p>
  
  <p>I understand that I need to mix in <code>ActiveModel::ForbiddenAttributesProtection</code> into my models and set <code>config.active_record.whitelist_attributes = false</code> in <code>config/application.rb</code>.  I have also pulled all of my <code>attr_accessible</code> calls from the model.</p>
  
  <p>With or without the mixin I am getting mass assignment errors. </p>
  
  <p><code>ActiveModel::MassAssignmentSecurity::Error:
         Can't mass-assign protected attributes: home_phone, cell_phone
  </code></p>
  
  <p>Am I missing something?</p>