Sometimes you need to set something that normally would be protected in by forbidden attributes or mass assignment possibly for seeding data or imports. These techniques will work with most ActiveRecord methods including new, create, assign_attributes, update_attributes.

Rails 5

Just call .to_unsafe_hash on your params before passing them in.

User.create(params[:user], without_protection: true)
# or
User.create({name: 'Weston Ganger', company: 'Solid Foundation Web Development'}, without_protection: true)

Related External Links:

• Stack Overflow - is-there-a-way-to-bypass-mass-assignment-protection
• Stack Overflow - in-rails-4-disable-strong-parameters-by-default