Use strong parameters for user in admin/registrations#update

This commit is contained in:
Stella Rouzi 2016-05-02 18:02:57 +03:00
parent 6bcecbd219
commit 9fe7d0ca7c
2 changed files with 7 additions and 5 deletions

View file

@ -14,8 +14,7 @@ module Admin
def edit; end
def update
@user.update_attributes(registration_params[:user_attributes])
params[:registration].delete :user_attributes
@user.update_attributes(user_params)
@registration.update_attributes(registration_params)
if @registration.save
@ -54,11 +53,14 @@ module Admin
@user = User.find_by(id: @registration.user_id)
end
def user_params
params.require(:user).permit(:name, :nickname, :affiliation)
end
def registration_params
params.require(:registration).permit(:user_id, :conference_id, :arrival, :departure, :attended,
:volunteer, :other_special_needs,
vchoice_ids: [], qanswer_ids: [], qanswers_attributes: [], event_ids: [],
user_attributes: [:nickname, :name, :affiliation, :tshirt, :mobile, :volunteer_experience, :languages])
vchoice_ids: [], qanswer_ids: [], qanswers_attributes: [], event_ids: [])
end
end
end