attr_protected atribute is still allowing mass assignment...

Hello guys, I'm following the tutorial development of treebook and I'm now facing a problem.

We are adding the user_id field into the New Status form and we don't want to allow users to assign the user_id to the post. The problem is even if I declared attr_protected :user_id in my model the view still let's me assign that attribute...

Can I get any adivce on what can be possibly be wrong?

Thanks a lot.

PS:

My model for users.rb

```class User < ActiveRecord::Base # Include default devise modules. Others available are: # :confirmable, :lockable, :timeoutable and :omniauthable devise :database_authenticatable, :registerable, :recoverable, :rememberable, :trackable, :validatable

attr_accessible :first_name, :last_name, :profile_name attr_protected :user_id end

My view for New status:

```<%= simple_form_for(@status, html: {class: "form-horizontal"}) do |f| %>
  <% if @status.errors.any? %>
    <div id="error_explanation">
      <h2><%= pluralize(@status.errors.count, "error") %> prohibited this status from being saved:</h2>

      <ul>
      <% @status.errors.full_messages.each do |msg| %>
        <li><%= msg %></li>
      <% end %>
      </ul>
    </div>
  <% end %>

  <%= f.input :user_id %>
  <%= f.input :content %>
  <div class="form-actions">
    <%= f.button :submit %>
  </div>
<% end %>