Strange Can't mass-assign protected attributes error?

You should make the :rating and :review accessible. Why do you need to make the user accessible? If you are simply trying to save a user's review (of course when he is signed in), then you can pass in the user's id from the controller which I see that you have done in the create method.

Use assign_attributes to set all the attributes for a particular mass-assignment security role by passing in a hash of attributes.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.