Strong parameters:

Strong parameters: Dealing with mass assignment in the controller instead of the model

Strong parameters:

We're exploring a new way to deal with mass-assignment protection in Rails. Or actually, it's not really a new way, it's more of an extraction of established practice with some vinegar mixed in for when you forget. This new approach is going to be a part of Rails 4.0 by default, but we'd like your help in testing and forming it well in advance of that release. Strong parameters This new approach is an extraction of the slice pattern and we're calling the plugin for it strong_parameters (already available as a gem as well). The basic idea is to move mass-assignment protection out of the model and into the controller where it belongs. The whole point of the controller is to control the flow between user and application, including authentication, authorization, and as part of that access control. We should never have put mass-assignment protection into the model, and many peo...

Full article: http://weblog.rubyonrails.org/2012/3/21/strong-parameters/

Tweets

@rubyve » 19 Apr '12, 4pm
“@coders_vzla: Riding Rails:Strong parameters: Dealing with mass assignment in controller instead of the model [link] @rubyve”
@chrismurray0 » 25 Mar '12, 7am
RT @neb2000: Interesting... [link]
@neb2000 » 25 Mar '12, 12am
Interesting... [link]
@svileng » 23 Mar '12, 11pm
Dealing with mass-assignment in the controller (default in Rails 4.0): [link] #rails
@jirihradil » 23 Mar '12, 8am
zbytecny humbuk kvuli mass assignment v #rails pokracuje: [link]
@teflonted » 22 Mar '12, 5pm
Strong parameters: Dealing with mass assignment in the controller instead of the model [link] via @zite
@chrisbaglieri » 22 Mar '12, 4pm
Baking in the slice pattern to core Rails relocating mass assignment protection to controllers where it belongs. Nice. [link]
@JoeKueser » 22 Mar '12, 2pm
Hey @railsconf with "strong parameters" being such a hot topic, can we get someone to speak on it? @dhh maybe? [link]
@tigluiz » 22 Mar '12, 1pm
Great tip [link]
@dpickett » 22 Mar '12, 1pm
ew. I disagree that securing mass assignment is a controller concern [link]
@davidebarison » 22 Mar '12, 1pm
RT @railsjedi: Rails is finally coming around! [link] until rails 4.0, ditch attr_accessible/attr_protected and use the slice pattern
@railsjedi » 22 Mar '12, 1pm
Rails is finally coming around! [link] until rails 4.0, ditch attr_accessible/attr_protected and use the slice pattern
@hnfirehose » 22 Mar '12, 1pm
Strong parameters: Handle mass assignment in controller instead of model: [link]
@AkitaOnRails » 22 Mar '12, 1pm
RT @taq: Strong parameters: Dealing with mass assignment in the controller instead of the model [link]
@pardel » 22 Mar '12, 12pm
@perlmunger Hi Matt! It was great to chat to you yesterday. BTW, did you see this announcement from @dhh? [link]
@codykrieger » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@panggi » 22 Mar '12, 12pm
Riding Rails: Strong parameters: Dealing with mass assignment in the controller instead of the model [link]
@rails » 22 Mar '12, 12pm
Strong parameters: [link]
@_rjung » 22 Mar '12, 1pm
RT @rails: Strong parameters: [link]
@dmedvinsky » 22 Mar '12, 1pm
RT @rails: Strong parameters: [link]
@iGELei » 22 Mar '12, 1pm
RT @rails: Strong parameters: [link]
@sujal » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@btucker » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@taq » 22 Mar '12, 12pm
Strong parameters: Dealing with mass assignment in the controller instead of the model [link]
@matiaskorhonen » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@netzfisch » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@michelemina » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@neilmiddleton » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@ayrtonbe » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@heroku » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@KevinGriffin » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@sobrinho » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@rafaelrosafu » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@BentSolutions » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@lenonm » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@rafaelss » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@davidbarral » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@defv » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@edham_arief » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@zellux » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@andoy » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@imobachgs » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]
@chloerei » 22 Mar '12, 12pm
RT @rails: Strong parameters: [link]