From 2c871abd03f1dcc02873d236099c9f5b43b514b5 Mon Sep 17 00:00:00 2001 From: Brenda Wallace Date: Sun, 12 Feb 2017 22:49:23 +1300 Subject: [PATCH] don't allow owner in params --- app/controllers/gardens_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/gardens_controller.rb b/app/controllers/gardens_controller.rb index 034e92a7e..7497acdd5 100644 --- a/app/controllers/gardens_controller.rb +++ b/app/controllers/gardens_controller.rb @@ -87,7 +87,7 @@ class GardensController < ApplicationController private def garden_params - params.require(:garden).permit(:name, :slug, :owner_id, :description, :active, + params.require(:garden).permit(:name, :slug, :description, :active, :location, :latitude, :longitude, :area, :area_unit) end