Thanks for the latest updates on Rails4 branch of Devise, it doesn’t really need to insert ‘resource_params’. I’ve created a brand new Rails4 app and followed basic Devise installation steps and my app works properly, so I think, you’ve done well. But there is a modified gist which gives you some extra details in terms … Read more
Rails 5.1+ params.require(:post).permit(:files => {}) Rails 5 params.require(:post).tap do |whitelisted| whitelisted[:files] = params[:post][:files].permit! end Rails 4 and below params.require(:post).tap do |whitelisted| whitelisted[:files] = params[:post][:files] end
Once again, it was a matter of reading the manual … The magic word is :account_update and thus the working version becomes def configure_permitted_parameters devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:email, :password, :password_confirmation, :firstname, :middlename, :lastname, :nickname) } devise_parameter_sanitizer.for(:account_update) { |u| u.permit(:email, :password, :password_confirmation, :current_password, :firstname, :middlename, :lastname, :nickname) } end Note that if you’re in the business … Read more
Try this params.require(:post).permit(:name, :email, :categories => []) (Disregard my comment, I don’t think that matters)
Found the answer here. Rather than inserting the attribute from within the controller action, you can insert it into the params definition with a merge. To expand upon my previous example: private def post_params params.require(:post).permit(:some_attribute).merge(user_id: current_user.id) end
You can call the bang version of permit. params.require(:user).permit! Strong Params README on Github Source code for reference: def permit! each_pair do |key, value| convert_hashes_to_parameters(key, value) self[key].permit! if self[key].respond_to? :permit! end @permitted = true self end
As odd as it sound when you want to permit nested attributes you do specify the attributes of nested object within an array. In your case it would be Update as suggested by @RafaelOliveira params.require(:measurement) .permit(:name, :groundtruth => [:type, :coordinates => []]) On the other hand if you want nested of multiple objects then you … Read more
This https://github.com/rails/strong_parameters seems like the relevant section of the docs: The permitted scalar types are String, Symbol, NilClass, Numeric, TrueClass, FalseClass, Date, Time, DateTime, StringIO, IO, ActionDispatch::Http::UploadedFile and Rack::Test::UploadedFile. To declare that the value in params must be an array of permitted scalar values map the key to an empty array: params.permit(:id => []) In … Read more