Brakeman: Mass Assignment not restricted using attr_accessible
<p>I totally understand what "Mass assignment" means and if a model does not contain any fields under <code>attr_accessible</code> , it will give the warning in the title.</p>

<p>Now I have this scenario.
I have a model that has just 2 columns, <code>user_id</code> and <code>company_id</code>.
I am making sure that while instantiating a instance of this model, I am not using Mass assignment.
Instead I am going for <code>new + save</code>.</p>

<p>But Since brakeman does not find any <code>attr_accessible</code> in this model , I add the below line in the model:</p>

<p><code>attr_accessible :user_id, :company_id</code></p>

<p>Post the above code, the previous issue gets fixed but brakeman comes up with one more warning: 
Potentially dangerous attribute available for Mass assignment.</p>

<p>So what should I do in this case. I dont want to get any issues related to Mass Assignment.</p>

<p>Thanks.</p>