module Api class PostsController < Api::BaseController def permitted_params [:body] # title not permitted end end end