Prevent user_id from being updated via form

2013-04-07 06:14:15 -04:00 · 2013-04-07 06:14:15 -04:00 · 2c3381ae6d
parent b65219eb0c
commit 2c3381ae6d
1 changed files with 2 additions and 1 deletions
--- a/app/models/alert.rb
+++ b/app/models/alert.rb
@ -1,5 +1,6 @@
 class Alert < ActiveRecord::Base
-  attr_accessible :alerted, :course, :department, :user_id, :semester
+  attr_accessible :alerted, :course, :department, :semester
+  attr_protected :user_id

  validates :department,  :presence     => true,
                          :length       => {