raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-04-04 07:09:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Handle strong params in subscription_line_items controller

Browse Source
This commit is contained in:
Luis Ramos
2020-02-23 17:53:13 +00:00
parent eccaaca907
commit d7cfda8385
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/controllers/admin/subscription_line_items_controller.rb
View File

@@ -11,7 +11,7 @@ module Admin
respond_to :json
def build
@subscription_line_item.assign_attributes(params[:subscription_line_item])
@subscription_line_item.assign_attributes(subscription_line_item_params)
@subscription_line_item.price_estimate = price_estimate
render json: @subscription_line_item, serializer: Api::Admin::SubscriptionLineItemSerializer,
shop: @shop, schedule: @schedule
@@ -27,7 +27,7 @@ module Admin
@shop = Enterprise.managed_by(spree_current_user).find_by(id: params[:shop_id])
@schedule = permissions.editable_schedules.find_by(id: params[:schedule_id])
@order_cycle = @schedule.andand.current_or_next_order_cycle
@variant = variant_if_eligible(params[:subscription_line_item][:variant_id]) if @shop.present?
@variant = variant_if_eligible(subscription_line_item_params[:variant_id]) if @shop.present?
end
def new_actions
@@ -58,5 +58,9 @@ module Admin
def variant_if_eligible(variant_id)
SubscriptionVariantsService.eligible_variants(@shop).find_by(id: variant_id)
end
def subscription_line_item_params
params.require(:subscription_line_item).permit(:quantity, :variant_id)
end
end
end