Ruby on Rails is it possible to prevent changes to form values ​​(composed by form_for) in the browser?

Question

Ruby on Rails

Let's say we have a model with records whose id is: 1, 2, 3, 4, 5, 6. These records can be added to the list (select). But for certain objects of a different model, for which a form is created, you do not need to add the entire set of these values, but for example, add only 2, 3, 6. The rest of the values ​​are unacceptable.
For what we create select with values ​​2, 3, 6 for one form. However, it remains possible to open the html code of the page and change the value (value) of the option tag in select to any other and send (commit) the form with the changed value, which the controller will accept without problems. As a result, we get an unacceptable record in the database.
Is it possible to protect the form (form_for) from changing the values ​​(value) by the user in the browser?
Or do you need to write your own validation at the model level or write exceptions in the controller (considering that you actually have to repeat the code that selects acceptable values ​​​​to compose a select)? I tried googling but couldn't find any information on this.
I would be happy to hear suggestions and recommendations on this issue.

Answer 1

1. Everything that is in the user's browser belongs to the user, and he can do whatever he wants with it. You can't prevent a user from editing files on your computer through Rails, can you?
2. All data entered by the user in the forms must be additionally checked on the server. That is, if you want only 2, 3 or 6 in a certain field, then you need to do this check on the server.

Answer 2

Own validation on the model - my choice