Rake aborted! Can't mass-assign protected attributes: name about communityengine

[RickChen]

I'd be happy to help with this fix, just need some guidance.

[bborn]

I think as of Rails 3.2.3 mass assignment is limited to whitelisted attributes by default. See: http://www.h-online.com/security/news/item/Rails-3-2-3-makes-mass-assignment-change-1498547.html

I think we just need to add attr_accessible :name to the FriendshipStatus model. I have a feeling there will be a bunch of other models that will need to be updated too.

[bborn]

Soved with #67

[RickChen]

Thank you! Will try to run install again tongiht!

On Wed, May 9, 2012 at 6:00 AM, Bruno Bornsztein <
[email protected]

wrote:

Soved with #67

---

Reply to this email directly or view it on GitHub:
#74 (comment)

[GJL]

@bborn
The pull request you are referencing is about "Activate users responding to a reset password email". The last two pull requests you merged in were:

#67
#75

I think this issue should not be closed because none of these pull requests solves it. My pull request only solves the issue when creating a forum topic. I have not yet looked into detail where else mass assignment is intercepted.

[bborn]

My bad ... you're right, the mass assignment thing is still a problem for other models.

Have this problem been solved? I meet this one today.HELP!

[akipponn]

Has this problem been solved? I still confront this problem.

[bborn]

Yes, this is fixed now.