They advocate a split between the resources for users and people/profiles. I've tried it both ways, and my current thinking is that the split isn't worth the t

They advocate a split between the resources for users and people/profiles. I've tried it both ways, and my current thinking is that the split isn't worth the trouble. Being paranoid with attr_accessible and writing good tests are probably enough. (But I might be wrong.)