Rails - Form not passing validations - ruby-on-rails

Question

I have these validation rules:
class Employee < ActiveRecord::Base
validates :name, presence: true, length: { maximum: 50 }
VALID_EMAIL_REGEX = /\A[\w+\-.]+#[a-z\d\-.]+\.[a-z]+\z/i
validates :email, presence: true, format: { with: VALID_EMAIL_REGEX }, uniqueness: { case_sensitive: false }
has_secure_password
validates :password, length: { minimum: 6 }
before_save { self.email = email.downcase }
end
Here is debug(params)
--- !ruby/hash:ActionController::Parameters
utf8: ✓
authenticity_token: rqWNFu2/jeoZfTTZD5N6M080UcazPZR2hl0ON92sxnA=
employee: !ruby/hash:ActionController::Parameters
name: xxx
email: yyyy#zzzz.com
password: '123456'
password_confirmation: '123456'
commit: Create Employee
action: create
controller: employees
But the validation still fails saying:
Email can't be blank
Email is invalid
Password can't be blank
Password is too short (minimum is 6 characters)
edit: controller code
def create
#employee = Employee.new(employee_params)
respond_to do |format|
if #employee.save
format.html { redirect_to #employee, notice: 'Employee was successfully created.' }
format.json { render action: 'show', status: :created, location: #employee }
else
format.html { render action: 'new' }
format.json { render json: #employee.errors, status: :unprocessable_entity }
end
end
end
Anyone can explain to me what i am doing wrong? The params seems to be fine and filled correctly but i still can't pass the validation

Answer 1

The problem is caused by incorrect use of Strong Parameters. Declaring employee_params the following way should fix it:
private
def employee_params
params.require(:employee).permit(:name, :email, :password, :password_confirmation)
end

Answer 2

With Rails4 Strong Parameters concept, you must permit the parameters that you would like to insert(create action)/update(update action) in database explicitly else they won't pass through.
Permit email and password in employee_params method.
employee_params should look as below:
def employee_params
params.require(:employee).permit(:email, :password, :password_confirmation, :name)
end