params = ActionController::Parameters.new( order: { status: "shipped", account_id: 99 } ) allowed = params.require(:order).permit(:status) puts allowed.to_h puts allowed.permitted?