Fixed diary entry and comment hiding for mass assignment protection
authorTom Hughes <tom@compton.nu>
Sun, 13 May 2012 17:44:54 +0000 (18:44 +0100)
committerTom Hughes <tom@compton.nu>
Sun, 13 May 2012 17:44:54 +0000 (18:44 +0100)
app/controllers/diary_entry_controller.rb

index 3e012f23c6a34c306560bb2ae98e453539fc9ca9..c45d369ac1832acedadb22be2954535e4f3c5eb0 100644 (file)
@@ -176,13 +176,13 @@ class DiaryEntryController < ApplicationController
 
   def hide
     entry = DiaryEntry.find(params[:id])
-    entry.update_attributes(:visible => false)
+    entry.update_attributes({:visible => false}, :without_protection => true)
     redirect_to :action => "list", :display_name => entry.user.display_name
   end
 
   def hidecomment
     comment = DiaryComment.find(params[:comment])
-    comment.update_attributes(:visible => false)
+    comment.update_attributes({:visible => false}, :without_protection => true)
     redirect_to :action => "view", :display_name => comment.diary_entry.user.display_name, :id => comment.diary_entry.id
   end