mass-assignment

Just want to be clear on what mass assignment is and how to code around it. Is mass assignment the assignment of many fields using a hash, ie like.. @user = User.new(params[:user]) And to prevent this you use attr_accessible like: attr_accessible :name, :email So that a field like :admin could not be added by mass assignment? But we can modify it in code by something like: @user.admin = true So is it true that if we don't have attr_accessible then everything is accessible for mass assignment? And finally the tricky point ... is it true that even with one attr_accessible like "attr_accessible

I have a Rails 3 app which JSON encodes objects in order to store them in a Redis key/value store. When I retrieve the objects, I'm trying to decode the JSON and instantiate them from the data like so: def decode(json) self.new(ActiveSupport::JSON.decode(json)["#{self.name.downcase}"]) end The problem is that doing this involves mass assignment which is disallowed (for good reason I'm told!) for attributes I haven't given attr_writer ability to. Is there a way I can bypass the mass assignment protection just for this operation only? assign_attributes with without_protection: true seems less

When I went through Laravel Document about Eloquent ORM topic part, I got a new term Mass Assignment . Document show How to do Mass Assignment and the fillable or guarded properties settings. But after went through that, I didn't have a clearly understand about Mass Assignment and how it works. In my past experience in CodeIgniter, I also didn't hear about this term. Does anyone have a simple explanation about that? Mass assignment is when you send an array to the model creation, basically setting a bunch of fields on the model in a single go, rather than one by one, something like: $user =