Enforce attr_accessible on #attributes=

Closes #342
mongomapper · Nov 7, 2011 · 3b61c4e · 3b61c4e
1 parent 87afcda
commit 3b61c4e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/lib/mongo_mapper/plugins/accessible.rb b/lib/mongo_mapper/plugins/accessible.rb
@@ -15,7 +15,7 @@ def attr_accessible(*attrs)
       end
 
       module InstanceMethods
-        def assign(attrs={})
+        def attributes=(attrs={})
           super(filter_inaccessible_attrs(attrs))
         end
 

diff --git a/test/functional/test_accessible.rb b/test/functional/test_accessible.rb
@@ -70,6 +70,12 @@ class AccessibleTest < Test::Unit::TestCase
       @doc.admin.should be_false
     end
 
+    should "ignore inaccessible attribute on #attributes=" do
+      @doc.attributes = {:name => 'Ren Hoek', :admin => true}
+      @doc.name.should == 'Ren Hoek'
+      @doc.admin.should be_false
+    end
+
     should "be indifferent to whether the accessible keys are strings or symbols" do
       @doc.update_attributes!("name" => 'Stimpson J. Cat', "admin" => true)
       @doc.name.should == 'Stimpson J. Cat'