Fix ForbiddenAttributesError on tag rules

app/controllers/admin/enterprises_controller.rb

@@ -214,7 +214,8 @@ module Admin
           rule = @object.tag_rules.find_by(id: attrs.delete(:id)) ||
                  attrs[:type].constantize.new(enterprise: @object)
           create_calculator_for(rule, attrs) if rule.type == "TagRule::DiscountOrder" && rule.calculator.nil?
-          rule.update(attrs)
+
+          rule.update(attrs.permit(PermittedAttributes::TagRules.attributes))
         end
       end
     end

app/services/permitted_attributes/tag_rules.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module PermittedAttributes
+  class TagRules
+    def self.attributes
+      [
+        :id, :type, :preferred_customer_tags, :calculator_type,
+        { calculator_attributes: [:id, :preferred_flat_percent] }
+      ]
+    end
+  end
+end