I have a standard RESTful controller that uses strong parameters.
class UsersController < ApplicationController respond_to :html, :js def index @user
before_filter do params[:user] = safe_params end load_and_authorize_resource