How should I protect mass-assignment in Sinatra app with Datamapper?

Question

I have Link model in Sinatra app

class Link
  include DataMapper::Resource
  has n, :views

  validates_presence_of :url,
    message: "You must specify a URL."
  validates_length_of   :url,
    maximum: 4096,
    allow_blank: true,
    message: "That URL is too long."
  validates_format_of :url,
    with: %r{^(https?|ftp)://.+}i,
    allow_blank: true,
    message: "The URL must start with http://, https://, or ftp:// ."

  property :id,         Serial
  property :url,        String
  property :token,      String
  property :created_at, DateTime
end

How to set up something like attr_accessible :url, :token?

Here's a way: http://kellishaver.tumblr.com/post/15802062803/mass-assignment-protection-datamapper-and-sinatra — Patrick Oscity, Apr 24 '13 at 15:46
@regedarek I suppose you mean `attr_accessible` instead of `attr_accessor`. — toro2k, Apr 24 '13 at 15:59

toro2k · Accepted Answer · 2013-04-24T15:57:19.387

0

You may use the DataMapper::MassAssignmentSecurity module from the gem dm-rails.

class Link

  include DataMapper::Resource
  include DataMapper::MassAssignmentSecurity
  attr_accessible :url, :token

  # ...

end

edited Apr 24 '13 at 15:57

answered Apr 24 '13 at 15:52

toro2k

18,388
7
58
66

How should I protect mass-assignment in Sinatra app with Datamapper?

1 Answers1