diff options
author | Alexander Uvarov <alexander.uvarov@gmail.com> | 2011-06-23 12:56:39 +0600 |
---|---|---|
committer | Alexander Uvarov <alexander.uvarov@gmail.com> | 2011-06-23 12:56:39 +0600 |
commit | 528f405cdc6195f0a872431fdcd2529729e27af8 (patch) | |
tree | f97ba9085011666a8d29011b1f8416d867893193 /activemodel/test/cases/mass_assignment_security_test.rb | |
parent | 87b548ccac8fd9b384a024a1374a2474e7c4d604 (diff) | |
download | rails-528f405cdc6195f0a872431fdcd2529729e27af8.tar.gz rails-528f405cdc6195f0a872431fdcd2529729e27af8.tar.bz2 rails-528f405cdc6195f0a872431fdcd2529729e27af8.zip |
Allow to specify mass-assignment roles as array
Diffstat (limited to 'activemodel/test/cases/mass_assignment_security_test.rb')
-rw-r--r-- | activemodel/test/cases/mass_assignment_security_test.rb | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/activemodel/test/cases/mass_assignment_security_test.rb b/activemodel/test/cases/mass_assignment_security_test.rb index a778240827..be07e59a2f 100644 --- a/activemodel/test/cases/mass_assignment_security_test.rb +++ b/activemodel/test/cases/mass_assignment_security_test.rb @@ -43,6 +43,20 @@ class MassAssignmentSecurityTest < ActiveModel::TestCase assert_equal expected, sanitized end + def test_attributes_accessible_with_roles_given_as_array + user = Account.new + expected = { "name" => "John Smith", "email" => "john@smith.com" } + sanitized = user.sanitize_for_mass_assignment(expected.merge("admin" => true)) + assert_equal expected, sanitized + end + + def test_attributes_accessible_with_admin_role_when_roles_given_as_array + user = Account.new + expected = { "name" => "John Smith", "email" => "john@smith.com", "admin" => true } + sanitized = user.sanitize_for_mass_assignment(expected.merge("super_powers" => true), :admin) + assert_equal expected, sanitized + end + def test_attributes_protected_by_default firm = Firm.new expected = { } |