raysrashmi

class BooksController < ApplicationController
  def create
    @book = Book.new(params[:book], as : current_user.try(:admin) ? :admin : :user)
    respond_to do |format|
      if @book.save
        format.html { redirect_to @book notice 'Book was successfully created.' }
      else
        format.html { render action : "new" }
      end
    end

raysrashmi

class Book < ActiveRecord::Base
  attr_accessible :name, :author, :public as : :admin
  attr_accessible :name, :author as : :user
  attr_accessible :name, as : :reporting_user
end

raysrashmi

config.active_record.whitelist_attributes = true 

raysrashmi

gem 'strong_parameters' 

raysrashmi

class Book < ActiveRecord::Base
  include ActiveModel::ForbiddenAttributesProtection
end

raysrashmi

class BooksController < ApplicationController
  def create
    @book = Book.new(book_params)

    respond_to do |format|
      if @book.save
        format.html { redirect_to @book, notice : 'Book was successfully created.' }
      else
        format.html { render action : "new" }
      end

raysrashmi

 params.require(:book).permit(:name,:author,:public)

raysrashmi

params[:book].permit(:name,:author,:chapters_attributes => [:number_of_pages]) 

raysrashmi

def user_params 
  params.require(:user).permit(:name, :email)
end 

raysrashmi

params[:user] = {:name => 'Foo',:email => '[email protected]'} 
@user = User.new(params[:user])