Fix stffn#204, allow :additional_collection to work with strong params

NetsoftHoldings · Jul 15, 2015 · d43677d · d43677d
1 parent 45e91af
commit d43677d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/declarative_authorization/in_controller.rb b/lib/declarative_authorization/in_controller.rb
@@ -507,7 +507,7 @@ def filter_resource_access(options = {})
         collections = actions_from_option(options[:collection]).merge(
             actions_from_option(options[:additional_collection]))
 
-        no_attribute_check_actions = options[:strong_parameters] ? actions_from_option(options[:collection]).merge(actions_from_option([:create])) : collections
+        no_attribute_check_actions = options[:strong_parameters] ? collections.merge(actions_from_option([:create])) : collections
 
         options[:no_attribute_check] ||= no_attribute_check_actions.keys unless options[:nested_in]