Confusing permits for requirement.

[seivan]

params.require(:user).permit(:name, :weight, :avatar)

I read that, as it requires :name inside :user

But from the looks of it, it just requires that :name exists somewhere in params, even outside of :user

Doing a request with nothing but @{@"name" : @"TheNameWrittenHere"};

That sorta (by checking the rails logs) put the :name with its value inside :user

Could someone please clarify this?

Parameters: {"name"=>"TheNameWrittenHere", "user"=>{"name"=>"TheNameWrittenHere"}}

[coreyward]

require requires the argument you pass, so to speak, so in this example the only thing you're requiring is :user.

You are also permiting the use of three additional keys: :name, :weight, :avatar under :user, thus:

{ user: { name: 'selvan', weight: 100, avatar: 'pink_dude.png' } }

[seivan]

@coreyward Thanks for responding.

But this doesn't make things any clearer.
I just did a request with name "name" : "TheNameWrittenHere" without any user at all, and it still worked. As in it permitted "name" outside "user" - in fact, there wasn't even a "user" there in the request.