Re: Fwd: Problem using nested_attributes for habtm relationship

Michael Koziarski
Tue, 03 May 2011 21:06:39 -0000

> found  this was a bug in rails 2.3.8 and already reported here
 https://rails.lighthouseapp.com/projects/8994/tickets/2415-accepts_nested_attributes_for-doest-work-when-nested_attributes-hash-has-an-id-entry.

Using existing IDs in nested_attributes cannot be supported for
security reasons.  It looks like it makes sense for the ''user has a
bunch of roles'' case, however for other use cases it''s a huge
security
hole.  For instance editing permissions for access to a bank account.

This functionality won''t be re-introduced.


--
Cheers

Koz