Make strong_parameters example simpler

rails · Sep 30, 2012 · 0677d99 · 0677d99
1 parent 955a72c
commit 0677d99
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/guides/source/security.md b/guides/source/security.md
@@ -499,10 +499,11 @@ attributes.
 
 ```ruby
 def user_params
-  filters = [:name]
+  if current_user.admin?
-  filters << :admin if current_user.try(:admin?)
+    params.require(:user).permit(:name, :admin)
-
+  else
-  params.require(:user).permit(*filters)
+    params.require(:user).permit(:name)
+  end
 end
 ```