Do not accept user_id as parameter when creating annotations

This commit is contained in:
kikito
2015-12-16 18:09:10 +01:00
parent 6335732ce6
commit 3245aa9dd2

View File

@@ -35,6 +35,6 @@ class AnnotationsController < ApplicationController
params params
.require(:annotation) .require(:annotation)
.permit(:quote, :text, ranges: [:start, :startOffset, :end, :endOffset]) .permit(:quote, :text, ranges: [:start, :startOffset, :end, :endOffset])
.merge(legislation_id: params[:legislation_id], user_id: params[:user_id]) .merge(legislation_id: params[:legislation_id])
end end
end end