Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

New devise_attr_accessible option #2071

Closed
wants to merge 1 commit into
from
Commits on Sep 25, 2012
  1. New devise_attr_accessible option

    VadimPushtaev committed Sep 25, 2012
    Devise uses update_attributes in its controllers, so fields like :name
    and :password should be attr_accessible in your model. If you don't want
    them to be attr_accissble, you can use this option. If it is set, Devise
    uses update_attributes :without_protection, but doesn't accept any param
    not from this list:
    
    config.devise_attr_accessible = [:name, :password, :password_confirmation]