"Mass assignment security is a feature that is aimed at dealing with form input. By placing it in the model, we end up making the implicit assumption that all ‘

"Mass assignment security is a feature that is aimed at dealing with form input. By placing it in the model, we end up making the implicit assumption that all ‘normal’ interaction with the model happens via a HTTP request. This assumption is incorrect and causes problems." http://jonathanleighton.com/articles/2011/mass-assignment-security-shouldnt-happen-in-the-model/ http://jonathanleighton.com/articles/2011/mass-assignment-se...