Question

The recommended solution is this:

config.active_record.whitelist_attributes = true

But this only works if you are using active record. On a mongoid rails project is there a similar approach? It uses active model but not active record.

Answer 1

I have asked the same question

https://groups.google.com/forum/?fromgroups#!topic/mongoid/xuBbuyhiFEU

It is currently not supported but you can do a (straight forward) monkey patch (as Benedikt
suggested)

https://gist.github.com/1977438

It is very similar to AR (you could check in AR code, I copy it here for simplicity)

ActiveSupport.on_load(:active_record) do
    if app.config.active_record.delete(:whitelist_attributes)
      attr_accessible(nil)
    end
    app.config.active_record.each do |k,v|
      send "#{k}=", v
    end
  end