NPO-Accounting/houdini
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add strong params to supporter_notes_controller

Browse source
This commit is contained in:
Eric Schultz 2019-11-05 12:30:01 -06:00
parent 994b04a830
commit d5b58754ad
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
app/controllers/nonprofits/supporter_notes_controller.rb
View file

@ -10,19 +10,26 @@ module Nonprofits
# post /nonprofits/:nonprofit_id/supporters/:supporter_id/supporter_notes
def create
params[:supporter_note][:user_id] ||= current_user&.id
render_json { InsertSupporterNotes.create([params[:supporter_note]]) }
render_json { InsertSupporterNotes.create([supporter_params[:supporter_note]]) }
end
# put /nonprofits/:nonprofit_id/supporters/:supporter_id/supporter_notes/:id
def update
params[:supporter_note][:user_id] ||= current_user&.id
params[:supporter_note][:id] = params[:id]
render_json { UpdateSupporterNotes.update(params[:supporter_note]) }
render_json { UpdateSupporterNotes.update(supporter_params[:supporter_note]) }
end
# delete /nonprofits/:nonprofit_id/supporters/:supporter_id/supporter_notes/:id
def destroy
render_json { UpdateSupporterNotes.delete(params[:id]) }
end
private
def supporter_params
params.require(:supporter_note)
end
end
end