roles_controller.rb in the_role-2.0.3

- old
+ new

@@ -17,11 +17,11 @@
   end
 
   def edit; end
 
   def create
-    @role = Role.new params[:role]
+    @role = Role.new role_params
 
     if @role.save
       flash[:notice] = t 'the_role.role_created'
       redirect_to_edit
     else
@@ -43,9 +43,13 @@
     flash[:notice] = t 'the_role.role_deleted'
     redirect_to admin_roles_url
   end
 
   protected
+
+  def role_params
+    params.require(:role).permit(:name, :title, :description)
+  end
 
   def role_find
     @role = Role.find params[:id]
 
     # TheRole: You should define OWNER CHECK OBJECT
\ No newline at end of file