It would be good to be able to specify: param_accessible :all If there is a param_accessible declaration in a superclass of the controller, then this would allow the params to be open right up again if desired.