Permit UsersController params

1 files changed, 6 insertions, 1 deletions

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 83d9dc3d6..23ce3ef0a 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -3,7 +3,7 @@ class UsersController < BreadcrumbController
   defaults :resource_class => User
 
   def create
-    @user = current_organisation.users.build(params[:user])
+    @user = current_organisation.users.build(user_params)
 
     if @user.valid?
       @user.invite!
@@ -25,4 +25,9 @@ class UsersController < BreadcrumbController
     end
   end
 
+  private
+  def user_params
+    params.require(:user).permit( :id, :name, :email )
+  end
+
 end