ActiveModel::ForbiddenAttributesError while using devise for registration

Question

I am using devise to register my users. I am customizing the create action of the registration controller, however whenever I try to create any new user it is refused and I get the mentioned error. I know I have to permit the params needed and I do so I don't understand why I keep getting the error. Below are my trials thus far. ``` #user model class User < ActiveRecord::Base devise :database_authenticatable, :registerable, :recoverable, :rememberable, :trackable, :validatable, :confirmable belongs_to :country #rest of the code end ## Custom registeration controller class RegistrationsController < Devise::RegistrationsController def create @user = User.new(params[:user]) if @user.save sign_in(@user, bypass: true) redirect_to user_employee_steps_path(@user), notice: 'A confirmation email was sent to your email, please complete your profile and confirm your account to start looking for potential employees' else render 'new' end end end #new.html.erb the view for the registration sign up…

Accepted Answer

The problem is in this line :

```
@user = User.new(params[:user])
```

Instead, maybe you should try

```
@user = User.new sign_up_params
```

If you wish to understand better why, read more about strong parameters and Rails 4. http://weblog.rubyonrails.org/2012/3/21/strong-parameters/

Or to stick with the devise handling you can also write

```
build_resource sign_up_params
```

And then the resource variable will give you access to your user that you can save, etc...

ActiveModel::ForbiddenAttributesError while using devise for registration

Solution

Problem