Hi guys, why ActionController::Parameters does not come with a #deny method along with #permit ?
I deal frequently into situations in which i would prevent malicious assignments of one or two attributes while the other should be all " permitted". So this: current_user.invoices.create! params.require(:invoice).deny(:user_id) would be quicker than: current_user.invoices.create! params.require(:invoice).permit(:name, :address, :email, ... ) But unless i'm missing something there is no way to 'blacklist' parameters, is there a particular reason for that? Maurizio -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/rubyonrails-core?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
