On May 20, 12:14 am, brianp <[email protected]> wrote: > If the user updates the profile and it's processed via the dealer then > this would not be an issue because it would still be in context
That is correct, however if you set the dealer_id to readonly, then it is not possible for the user to change it anyway, so User.find(3).update_attributes(params[:user]) is fine -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
