Permalink
Browse files

Fixed that .with_scope imposed create parameters bypass attr_protected

git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@3393 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
  • Loading branch information...
1 parent 7dd2d38 commit 16718e3e218cf5ad00943cc14e97938e2b3b2ca7 Tobias Lütke committed Jan 10, 2006
Showing with 5 additions and 2 deletions.
  1. +2 −0 activerecord/CHANGELOG
  2. +3 −2 activerecord/lib/active_record/base.rb
View
2 activerecord/CHANGELOG
@@ -1,5 +1,7 @@
*SVN*
+* .with_scope imposed create parameters now bypass attr_protected [Tobias Luetke]
+
* Don't raise an exception when there are more keys than there are named bind variables when sanitizing conditions. [Marcel Molina Jr.]
* Multiple enhancements and adjustments to DB2 adaptor. #3377 [contact@maik-schmidt.de]
View
5 activerecord/lib/active_record/base.rb
@@ -444,9 +444,10 @@ def create(attributes = nil)
if attributes.is_a?(Array)
attributes.collect { |attr| create(attr) }
else
- attributes.reverse_merge!(scope(:create)) if scoped?(:create)
-
object = new(attributes)
+ if scoped?(:create)
+ scope(:create).each { |att,value| object.send("#{att}=", value) }
+ end
object.save
object
end

0 comments on commit 16718e3

Please sign in to comment.