NPO-Accounting/houdini
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat(payments): add strong params

Browse source
This commit is contained in:
Luis Castro 2019-08-06 16:07:18 +02:00 committed by Eric Schultz
parent 41d578815a
commit 8f1b33cabd
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/controllers/nonprofits/payments_controller.rb
View file

@ -45,7 +45,7 @@ module Nonprofits
def update def update
@payment = current_nonprofit.payments.find(params[:id]) @payment = current_nonprofit.payments.find(params[:id])
@payment.update_attributes(params[:payment]) @payment.update_attributes(payment_params)
json_saved @payment json_saved @payment
end end
@ -76,5 +76,11 @@ module Nonprofits
PaymentMailer.resend_admin_receipt(params[:id], current_user.id) PaymentMailer.resend_admin_receipt(params[:id], current_user.id)
render json: {} render json: {}
end end
private
def payment_params
params.require(:payment).permit(:towards, :gross_amount, :refund_total, :fee_total, :kind, :date)
end
end # class PaymentsController end # class PaymentsController
end # module Nonprofits end # module Nonprofits

3
app/models/payment_import.rb
View file

@ -2,7 +2,8 @@
# License: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later # License: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later
class PaymentImport < ApplicationRecord class PaymentImport < ApplicationRecord
# attr_accessible :nonprofit, :user # :nonprofit,
# :user
has_and_belongs_to_many :donations has_and_belongs_to_many :donations
belongs_to :nonprofit belongs_to :nonprofit
belongs_to :user belongs_to :user