Hello, First of all, thanks a lot for the gem! As we have been bitten hard by permitted attributes, would it be fine by you I suggest a PR for the following: - if say a new config `permit_all_attributes_by_default` is `true` (default value), keep the behaviour here: https://github.com/CanCanCommunity/cancancan/blob/develop/lib/cancan/ability/strong_parameter_support.rb#L32 - if not, raise an error Cheers!
Hello,
First of all, thanks a lot for the gem!
As we have been bitten hard by permitted attributes, would it be fine by you I suggest a PR for the following:
if say a new config
permit_all_attributes_by_defaultistrue(default value), keep the behaviour here: https://github.com/CanCanCommunity/cancancan/blob/develop/lib/cancan/ability/strong_parameter_support.rb#L32if not, raise an error
Cheers!