Set preferences with #safe_attributes=.

git-svn-id: http://svn.redmine.org/redmine/trunk@15728 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Jean-Philippe Lang 2016-07-21 17:56:26 +00:00
parent e1da6de36f
commit fcec4d0975

View File

@ -132,7 +132,7 @@ class UsersController < ApplicationController
# Was the account actived ? (do it before User#save clears the change)
was_activated = (@user.status_change == [User::STATUS_REGISTERED, User::STATUS_ACTIVE])
# TODO: Similar to My#account
@user.pref.attributes = params[:pref] if params[:pref]
@user.pref.safe_attributes = params[:pref]
if @user.save
@user.pref.save