From: Jean-Philippe Lang <jp_lang@yahoo.fr>
Date: Sat, 3 Jun 2017 08:52:49 +0000 (+0000)
Subject: Permit role_ids on update.
X-Git-Tag: 3.4.0~83
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=6c2e387bbd99b3a4d8faa2ba89df7871398ec387;p=redmine.git

Permit role_ids on update.

git-svn-id: http://svn.redmine.org/redmine/trunk@16605 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/controllers/principal_memberships_controller.rb b/app/controllers/principal_memberships_controller.rb
index d4f4ba2de..e7a82d5f7 100644
--- a/app/controllers/principal_memberships_controller.rb
+++ b/app/controllers/principal_memberships_controller.rb
@@ -45,7 +45,7 @@ class PrincipalMembershipsController < ApplicationController
   end
 
   def update
-    @membership.attributes = params[:membership]
+    @membership.attributes = params.require(:membership).permit(:role_ids => [])
     @membership.save
     respond_to do |format|
       format.html { redirect_to_principal @principal }