Fix stffn#204, allow :additional_collection to work with strong params

NetsoftHoldings · Dec 29, 2018 · 99f7280 · 99f7280
1 parent 13bc25b
commit 99f7280
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/declarative_authorization/in_controller.rb b/lib/declarative_authorization/in_controller.rb
@@ -508,7 +508,7 @@ def filter_resource_access(options = {})
           actions_from_option(options[:additional_collection])
         )
 
-        no_attribute_check_actions = options[:strong_parameters] ? actions_from_option(options[:collection]).merge(actions_from_option([:create])) : collections
+        no_attribute_check_actions = options[:strong_parameters] ? collections.merge(actions_from_option([:create])) : collections
 
         options[:no_attribute_check] ||= no_attribute_check_actions.keys unless options[:nested_in]