#472: Update Platforms::MassBuildsController

app/controllers/platforms/mass_builds_controller.rb

@@ -22,7 +22,7 @@ class Platforms::MassBuildsController < Platforms::BaseController
   end
 
   def create
-    @mass_build                 = @platform.mass_builds.build(params[:mass_build])
+    @mass_build                 = @platform.mass_builds.build(subject_params(MassBuild))
     @mass_build.user            = current_user
     @mass_build.arches          = params[:arches] || []
     @mass_build.repositories  ||= params[:repositories] || []

app/models/mass_build.rb

@@ -45,10 +45,6 @@ class MassBuild < ActiveRecord::Base
   scope :search,      -> (q) { where("#{table_name}.description ILIKE ?", "%#{q}%") if q.present? }
 
   attr_accessor :arches, :repositories
-  # attr_accessible :arches, :auto_publish_status, :projects_list, :build_for_platform_id,
-  #                 :extra_repositories, :extra_build_lists, :increase_release_tag,
-  #                 :use_cached_chroot, :use_extra_tests, :description, :extra_mass_builds,
-  #                 :include_testing_subrepository, :auto_create_container, :repositories
 
   validates :save_to_platform_id,
             :build_for_platform_id,

app/policies/mass_build_policy.rb

@@ -15,4 +15,27 @@ class MassBuildPolicy < ApplicationPolicy
     !record.stop_build && create?
   end
 
+  # Public: Get list of parameters that the user is allowed to alter.
+  #
+  # Returns Array
+  def permitted_attributes
+    %i(
+      arches
+      auto_create_container
+      auto_publish_status
+      build_for_platform_id
+      description
+      external_nodes
+      extra_build_lists
+      extra_mass_builds
+      extra_repositories
+      include_testing_subrepository
+      increase_release_tag
+      projects_list
+      repositories
+      use_cached_chroot
+      use_extra_tests
+    )
+  end
+
 end