From 3245aa9dd2ee0d9a88b493ec4b6375c2b481bef7 Mon Sep 17 00:00:00 2001 From: kikito Date: Wed, 16 Dec 2015 18:09:10 +0100 Subject: [PATCH] Do not accept user_id as parameter when creating annotations --- app/controllers/annotations_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/annotations_controller.rb b/app/controllers/annotations_controller.rb index 9eab24b11..e75581d45 100644 --- a/app/controllers/annotations_controller.rb +++ b/app/controllers/annotations_controller.rb @@ -35,6 +35,6 @@ class AnnotationsController < ApplicationController params .require(:annotation) .permit(:quote, :text, ranges: [:start, :startOffset, :end, :endOffset]) - .merge(legislation_id: params[:legislation_id], user_id: params[:user_id]) + .merge(legislation_id: params[:legislation_id]) end end \ No newline at end of file