FeipingHunag · July 9, 2013 05:44 · Sep 25, 2012 · Jun 5, 2012
diff --git a/strong_parameters.rb b/strong_parameters.rb
@@ -48,13 +48,13 @@ def self.require_params *keys
 
   # Like require_params, but only applies to create action
   #
-  def self.require_params *keys
+  def self.require_params_on_create *keys
     filter_strong_params :require, :create, keys
   end
 
   # Like require_params, but only applies to update action
   #
-  def self.require_params *keys
+  def self.require_params_on_update *keys
     filter_strong_params :require, :update, keys
   end
 

diff --git a/strong_parameters.rb b/strong_parameters.rb
@@ -0,0 +1,106 @@
+require 'strong_parameters'
+
+class ActiveRecord::Base
+  include ActiveModel::ForbiddenAttributesProtection
+end
+
+class ActionController::Base
+
+  # Use this with CanCan's load_resource to permit a set of params before
+  # it tries to build or update a resource with them.
+  #
+  # Usage:
+  #   class BooksController < ApplicationController
+  #     load_resource :book
+  #     permit_params book: [:title, :isbn]
+  #   end
+  #
+  # Or:
+  #   class BooksController < ApplicationController
+  #     load_resource
+  #     permit_params :title, :isbn
+  #   end
+  #
+  # the second form should work in the simple case where you don't have to
+  # supply a resource name for #load_resource
+  #
+  def self.permit_params *keys
+    filter_strong_params :permit, [:create, :update], keys
+  end
+
+  # Like permit_params, but only applies to create action
+  #
+  def self.permit_params_on_create *keys
+    filter_strong_params :permit, :create, keys
+  end
+
+  # Like permit_params, but only applies to update action
+  #
+  def self.permit_params_on_update *keys
+    filter_strong_params :permit, :update, keys
+  end
+
+  # Like permit_params, but marks the params required
+  #
+  def self.require_params *keys
+    filter_strong_params :require, [:create, :update], keys
+  end
+
+  # Like require_params, but only applies to create action
+  #
+  def self.require_params *keys
+    filter_strong_params :require, :create, keys
+  end
+
+  # Like require_params, but only applies to update action
+  #
+  def self.require_params *keys
+    filter_strong_params :require, :update, keys
+  end
+
+  # Does a permit! at every level of the params to let everything through
+  #
+  def self.permit_all_params options = {}
+    prepend_before_filter options.reverse_merge(:only => [:create, :update]) do
+      self.params.deep_permit!
+    end
+  end
+
+  def self.filter_strong_params method, actions, keys # :nodoc:
+    hash = keys.extract_options!
+    if hash.present? && keys.present?
+      prepend_before_filter :only => actions do
+        self.params = params.send method, *keys, hash
+      end
+    elsif hash.present?
+      prepend_before_filter :only => actions do
+        self.params.merge! params.send(method, hash)
+      end
+    else
+      resource_name = self.to_s.sub("Controller", "").underscore.split('/').last.singularize
+      prepend_before_filter :only => actions do
+        if params.has_key?(resource_name)
+          self.params[resource_name] = params[resource_name].send method, *keys
+        else
+          self.params = params.send method, *keys
+        end
+      end
+    end
+  end
+end
+
+module ActionController
+  class Parameters < ActiveSupport::HashWithIndifferentAccess
+    def deep_permit!
+      self.each do |key, value|
+        if value.is_a?(Hash)
+          if !value.respond_to?(:permit!)
+            self[key] = value = ActionController::Parameters.new(value)
+          end
+          value.deep_permit!
+        end
+      end
+      permit!
+    end
+  end
+end