- In the settings view - In the model validation - In the controller parameter permissions - In the CoffeeScript/Ruby helpers