Skip to content

Instantly share code, notes, and snippets.

@iHiD

iHiD/user_creation.rb

Created June 10, 2012 13:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save iHiD/2905722 to your computer and use it in GitHub Desktop.
Save iHiD/2905722 to your computer and use it in GitHub Desktop.
Download ZIP
Security Article Part 2 - 6
Raw
user_creation.rb
User.create!
# -> #<User id: 2, can_do_dangerous_things: false, ...>
User.create!(:can_do_dangerous_things => true)
# -> ActiveModel::MassAssignmentSecurity::Error: Can't mass-assign protected attributes: can_do_dangerous_things
User.create!(:permissions => {:can_do_dangerous_things => true})
# -> #<User id: 2, can_do_dangerous_things: true, ...>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment