Mark settings as readonly, allow params for editable ones

app/controllers/admin/settings_controller.rb

@@ -30,7 +30,11 @@ class Admin::SettingsController < Admin::BaseController
 
   private
 
-  def set_current_section
-    @current_section = :settings
-  end
+    def set_current_section
+      @current_section = :settings
+    end
+
+    def setting_params
+      params.require(:setting).permit(Setting.editable_keys.map(&:to_sym))
+    end
 end