> found  this was a bug in rails 2.3.8 and already reported here  
> https://rails.lighthouseapp.com/projects/8994/tickets/2415-accepts_nested_attributes_for-doest-work-when-nested_attributes-hash-has-an-id-entry.

Using existing IDs in nested_attributes cannot be supported for
security reasons.  It looks like it makes sense for the 'user has a
bunch of roles' case, however for other use cases it's a huge security
hole.  For instance editing permissions for access to a bank account.

This functionality won't be re-introduced.


--
Cheers

Koz

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Core" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-core?hl=en.

Reply via email to