Whitelist permissions_attributes parameter. Fixes samvera/active_fedo…

…ra#550
samvera-deprecated · Nov 4, 2014 · 393c0b8 · 393c0b8
1 parent 0ddd0a0
commit 393c0b8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/spec/controllers/generic_files_controller_spec.rb b/spec/controllers/generic_files_controller_spec.rb
@@ -475,7 +475,7 @@
       post :update, id: generic_file,
         generic_file: { tag: [''],
                         permissions_attributes: [
-                          { type: 'user', name: 'user1', access: 'edit' },
+                          { type: 'person', name: 'user1', access: 'edit' },
                           { type: 'group', name: 'group1', access: 'read' }
                         ]
                       }

diff --git a/sufia-models/app/models/concerns/sufia/generic_file.rb b/sufia-models/app/models/concerns/sufia/generic_file.rb
@@ -26,7 +26,7 @@ module GenericFile
 
       # around_save :retry_warming
 
-      attr_accessible *(terms_for_display + [:part_of, :permissions])
+      attr_accessible *(terms_for_display + [:part_of, :permissions_attributes])
     end
 
     def persistent_url