Question

I’ve noticed that created resouce attributes are all blank after executing build_resource at Devise::RegistrationsController create function

here is the params object sent:

 "student"=>{"first_name"=>"George",
 "last_name"=>"Michle",
 "company_name"=>"Meri",
 "work_title"=>"Architect",
 "address"=>"Moon",
 "postal_code"=>"23410",
 "work_phone"=>"",
 "home_phone"=>"",
 "mobile_phone"=>"",
 "fax"=>"",
 "email"=>"[e-mail]",
 "password"=>"[FILTERED]",
 "password_confirmation"=>"[FILTERED]",
 "country_id"=>"2",
 "state_province_id"=>"2"}

Here is the resulted resource attributes:

[["address", ""], ["city", nil], ["company_name", ""], ["country_id", 1], ["created_at", Wed, 08 Feb 2012 04:52:35 UTC +00:00], ["current_sign_in_at", nil], ["current_sign_in_ip", nil], ["email", ""], ["encrypted_password", ""], ["fax", ""], ["first_name", ""], ["home_phone", ""], ["last_name", ""], ["last_sign_in_at", nil],  ["last_sign_in_ip", nil], ["license_number", nil], ["mobile_phone", ""], ["postal_code", ""], ["remember_created_at", nil], ["reset_password_sent_at", nil], ["reset_password_token", nil], ["sign_in_count", 0], ["state_province_id", nil], ["updated_at", Wed, 08 Feb 2012 04:52:35 UTC +00:00], ["username", nil], ["work_phone", ""], ["work_title", ""]]

So, why build_resource could not populate the params ? Where to look to solve this problem ?
Any help will be more than appreciated.

EDIT:

Here is the student model:

class Student < ActiveRecord::Base

  has_many :students_courseses
  has_many :courses , :through => :students_courseses



  # Include default devise modules. Others available are:
  # :token_authenticatable, :encryptable, :confirmable, :lockable, :timeoutable and :omniauthable
  devise :database_authenticatable, :registerable,
         :recoverable, :rememberable, :trackable, :validatable, :timeoutable

  belongs_to :country
  #validates :weburl, :url => {:allow_blank => true}, :length => { :maximum => 50 }

  validates_length_of :work_phone, :is => 10, :message => 'must be 10 digits, excluding special characters such as spaces and dashes. No extension or country code allowed.', :if => Proc.new{|o| !o.work_phone.blank?}
  validates_length_of :home_phone, :is => 10, :message => 'must be 10 digits, excluding special characters such as spaces and dashes. No extension or country code allowed.', :if => Proc.new{|o| !o.home_phone.blank?}
  validates_length_of :mobile_phone, :is => 10, :message => 'must be 10 digits, excluding special characters such as spaces and dashes. No extension or country code allowed.', :if => Proc.new{|o| !o.mobile_phone.blank?}
  validates_length_of :fax, :is => 10, :message => 'must be 10 digits, excluding special characters such as spaces and dashes. No extension or country code allowed.', :if => Proc.new{|o| !o.fax.blank?}

  # Setup accessible (or protected) attributes for your model
  attr_accessible :email, :password, :password_confirmation, :remember_me

  attr_accessible:username
  attr_accessible:first_name
  attr_accessible:last_name
  attr_accessible:address
  attr_accessible :city

  attr_accessible :state_province_id
  attr_accessible :country_id

  attr_accessible:postal_code
  attr_accessible:work_phone
  attr_accessible:home_phone
  attr_accessible:mobile_phone
  attr_accessible:fax

  attr_accessible:company_name
  attr_accessible:work_title
  attr_accessible:license_number

  ###############################################################


  #attr_accessor can be used for values you don't want to store in the database directly and that will only exist for the life of the object (e.g. passwords).
  attr_accessor :email, :password, :password_confirmation, :remember_me
  ###############################################################


  cattr_accessor :time_out_time

  def timeout_in
    if time_out_time.nil?
      STUDENT_LOG_OUT_PERIOD
    else
      time_out_time.seconds
    end
  end
end

The student model in route file:

  devise_for :students, :controllers => { :registrations => "students/registrations" }
  devise_for :students, :controllers => { :sessions => "students/sessions" }

EDIT2:

Here is the student registration controller:

class Students::RegistrationsController < Devise::RegistrationsController

  def update
    # no mass assignment for country_id, we do it manually
    # check for existence of the country in case a malicious user manipulates the params (fails silently)
    if student_signed_in? then
      if params[resource_name][:country_id]
        resource['country_id'] = params[resource_name][:country_id] if Country.find_by_id(params[resource_name][:country_id])
      end
      if params[resource_name][:state_province_id]
        resource.state_province_id = params[resource_name][:state_province_id] if State.find_by_id(params[resource_name][:state_province_id])
      end
    end
    super
  end

  def create
    super
  end

end

Answer 1

if I remove this line from my Student model:

attr_accessor :email, :password, :password_confirmation, :remember_me

every thing work fine!, I shouldn’t add attr_accessor , if I add it, devise will not be able to create a new resource from sent parameters.