Rails Tutorial 3 attribue unknown

[mike]

I to the part of the tutorial where a User model is created. It has
the following attributes:
# id :integer(4) not null, primary key
# name :string(255)
# email :string(255)
# created_at :datetime not null
# updated_at :datetime not null
# password_digest :string(255)
#

Then in an rspec test file the author issues this command:
before do
@user = User.new(name: "Example User", email: "us...@example.com",
password: "foobar", password_confirmation:
"foobar")
end

Now he says that password and password_confirmation are created
temporarily in memory and don't need to go into the database. But
when I try to run this rspec test it gives me an error stating unknown
attribute: password.

Can anyone help me get around this?
thanx,
mike

[Sergey Ezhov]

I simply add in model:
attr_accessible ... :password, :password_confirmation, ...

it work
but it can not absolutely truly

--
Posted via http://www.ruby-forum.com/.

[Rodrigo Vieira]

Be aware that, it is not safe to set passwords changeable via mass-assignment.

> --
> You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
> To post to this group, send email to rubyonra...@googlegroups.com.
> To unsubscribe from this group, send email to rubyonrails-ta...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
>

[Sergey Ezhov]

Rodrigo Vieira wrote in post #1059872:

> Be aware that, it is not safe to set passwords changeable via
> mass-assignment.

Your decision, please? How it to solve?

[azizmb.in]

Have you tried using Rails builtin confirmation mechanism?

--
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To post to this group, send email to rubyonra...@googlegroups.com.
To unsubscribe from this group, send email to rubyonrails-ta...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.

--
- Aziz M. Bookwala

Website | Twitter | Github

[Sergey Ezhov]

This example doesn't work without 'attr_accessable: ... , :password,
:password_confirmation ...'
and with
'has_secure_password'

How to set the record field comming from form field?

[vishal singh]

In users table their is wrong field name i.e password_digest,it should be only password not password_digest

[Sergey Ezhov]

vishal singh wrote in post #1060022:

> In users table their is wrong field name i.e password_digest,it should
> be
> only password not password_digest

Someone mentioned 'password_digest'? Only 'password' and
'password_confirmation'.