如何使用strong_parameters允许除user_id之外的所有属性？

Question

I would like to use something like that:

def answer_params
  params.require(:answer).permit!.without(:user_id)
end

Answer 1

这会有用吗？

params.require(:answer).permit!.except(:user_id)

Answer 2

I just want to put this out here, whitelisting is not DRY. Imagine a JSON API for a document based entry that could have up to 100 (or more) attributes (key value pairs). Generally the only pieces you need concern with are attributes that can escalate privileges like user_id.