Okay, so it just comes down to whether or not the user should be allowed to edit the FK relationship or not. You may be interested to know that you can have mu

Okay, so it just comes down to whether or not the user should be allowed to edit the FK relationship or not. You may be interested to know that you can have multiple attr_accessible declarations for different classes of user, and then when you call update_attributes you say which declaration should apply. But perhaps with strong parameters it's not worth going down that road.