Specify user modifiable ATTRIBUTES

app/controllers/default/units_controller.rb

@@ -18,9 +18,10 @@ class Default::UnitsController < ApplicationController
   end
 
   def import
+    params = @unit.slice(Unit::ATTRIBUTES - [:symbol, :base_id])
     current_user.units
       .find_or_initialize_by(symbol: @unit.symbol)
-      .update!(base: @base, **@unit.slice(:name, :multiplier))
+      .update!(base: @base, **params)
     run_and_render :index
   end
 

app/controllers/units_controller.rb

@@ -58,7 +58,7 @@ class UnitsController < ApplicationController
   private
 
   def unit_params
-    params.require(:unit).permit(:symbol, :name, :base_id, :multiplier)
+    params.require(:unit).permit(Unit::ATTRIBUTES)
   end
 
   def find_unit