Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix sanitize_for_mass_assigment when role is nil | Fabio Yamate | 2012-02-15 | 1 | -3/+3 |
| | | | | | | | There is an example in Rails documentation that suggests implementing assign_attributes method for ActiveModel interface, that by default sends option role with nil. Since mass_assignment_authorizer never is called without args, we can move the default value internally. | ||||
* | Array.wrap no longer needed | Aaron Patterson | 2012-01-04 | 1 | -3/+2 |
| | |||||
* | Support configuration on ActiveRecord::Model. | Jon Leighton | 2011-12-28 | 1 | -10/+12 |
| | | | | | | | | | | | | | | | The problem: We need to be able to specify configuration in a way that can be inherited to models that include ActiveRecord::Model. So it is no longer sufficient to put 'top level' config on ActiveRecord::Base, but we do want configuration specified on ActiveRecord::Base and descendants to continue to work. So we need something like class_attribute that can be defined on a module but that is inherited when ActiveRecord::Model is included. The solution: added ActiveModel::Configuration module which provides a config_attribute macro. It's a bit specific hence I am not putting this in Active Support or making it a 'public API' at present. | ||||
* | AM::MAS.attr_protected: rework usage example. | Bogdan Gusiev | 2011-12-23 | 1 | -9/+9 |
| | |||||
* | Fixed AM::MasAsSec.attr_protected usage example. | Bogdan Gusiev | 2011-12-22 | 1 | -15/+16 |
| | | | | | | | | Problems with current example: * DOESN'T WORK ** attr_protected :last_login, :as => :admin # doesn't make it accessible for admin * Uses ActiveSupport Fixnum extension | ||||
* | Fix AM::MassAssignementSecurity doc | Bogdan Gusiev | 2011-12-22 | 1 | -1/+1 |
| | |||||
* | Minor formating fix | Alexander Uvarov | 2011-06-24 | 1 | -2/+2 |
| | |||||
* | Follow rails convention by using Array.wrap | Alexander Uvarov | 2011-06-23 | 1 | -2/+3 |
| | |||||
* | Allow to specify mass-assignment roles as array | Alexander Uvarov | 2011-06-23 | 1 | -2/+8 |
| | |||||
* | no need for .rb | Damien Mathieu | 2011-05-31 | 1 | -1/+1 |
| | |||||
* | string inflections are needed for running tests in isolation | Damien Mathieu | 2011-05-31 | 1 | -0/+1 |
| | |||||
* | Transform the symbol into a constant lookup. | José Valim | 2011-05-31 | 1 | -17/+13 |
| | |||||
* | ActiveModel::MassAssignmentSecurity.mass_assignment_sanitizer method | Bogdan Gusiev | 2011-05-30 | 1 | -6/+24 |
| | | | | | In order to specify your own sanitize method Implemented .mass_assignment_sanitizer configuration option | ||||
* | MassAssignmentSecurity: add ability to specify your own sanitizer | Bogdan Gusiev | 2011-05-26 | 1 | -5/+9 |
| | | | | | | Added an ability to specify your own behavior on mass assingment protection, controlled by option: ActiveModel::MassAssignmentSecurity.mass_assignment_sanitizer | ||||
* | renamed mass-assignment scopes to roles, updated code, tests, docs and ↵ | Josh Kalderimis | 2011-05-08 | 1 | -23/+23 |
| | | | | security guide | ||||
* | minor correction to the AMo mass-assignment security docs | Josh Kalderimis | 2011-04-24 | 1 | -1/+1 |
| | |||||
* | AM mass assignment security attr_accessible and attr_protected now allow for ↵ | Josh Kalderimis | 2011-04-24 | 1 | -34/+85 |
| | | | | | | | | scopes using :as => scope eg. attr_accessible :name attr_accessible :name, :admin, :as => :admin | ||||
* | Remove Example headers. Code just flows with the text. 6ce844a3 | Paco Guzman | 2011-03-06 | 1 | -3/+1 |
| | |||||
* | Properly indent code example block | Daniel Schierbeck | 2011-01-15 | 1 | -19/+19 |
| | |||||
* | Change documentation for ActiveModel::MassAssignmentSecurity a bit and make ↵ | José Valim | 2010-07-08 | 1 | -26/+41 |
| | | | | debug always be called since some people may overwrite warn! to add extra behavior even if logger is not available. | ||||
* | mass_assignment_security moved from AR to AMo, and minor test cleanup | Josh Kalderimis | 2010-07-08 | 1 | -0/+145 |
Signed-off-by: José Valim <jose.valim@gmail.com> |