From a1b9acb72ec4b3a3d11f77efe64effb79e58b45d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jos=C3=A9=20Valim?= Date: Wed, 15 Feb 2012 05:21:20 -0800 Subject: Merge pull request #5049 from fabioyamate/master Fix sanitize_for_mass_assigment when role is nil --- activemodel/test/cases/mass_assignment_security_test.rb | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'activemodel/test/cases/mass_assignment_security_test.rb') diff --git a/activemodel/test/cases/mass_assignment_security_test.rb b/activemodel/test/cases/mass_assignment_security_test.rb index be07e59a2f..a197dbe748 100644 --- a/activemodel/test/cases/mass_assignment_security_test.rb +++ b/activemodel/test/cases/mass_assignment_security_test.rb @@ -19,6 +19,13 @@ class MassAssignmentSecurityTest < ActiveModel::TestCase assert_equal expected, sanitized end + def test_attribute_protection_when_role_is_nil + user = User.new + expected = { "name" => "John Smith", "email" => "john@smith.com" } + sanitized = user.sanitize_for_mass_assignment(expected.merge("admin" => true), nil) + assert_equal expected, sanitized + end + def test_only_moderator_role_attribute_accessible user = SpecialUser.new expected = { "name" => "John Smith", "email" => "john@smith.com" } -- cgit v1.2.3