From e50f29b0322f69f48a85c6a014c2d140406f0661 Mon Sep 17 00:00:00 2001
From: zhitomirskiyi <ilya@joindiaspora.com>
Date: Mon, 8 Nov 2010 15:10:23 -0800
Subject: [PATCH] the profile cannot massassign diaspora handle

---
 app/models/profile.rb                      | 3 +++
 spec/controllers/people_controller_spec.rb | 6 ++++++
 2 files changed, 9 insertions(+)

diff --git a/app/models/profile.rb b/app/models/profile.rb
index ce874c728..46f0c8235 100644
--- a/app/models/profile.rb
+++ b/app/models/profile.rb
@@ -32,6 +32,9 @@ class Profile
 
   before_save :strip_names
 
+  attr_accessible :first_name, :last_name, :image_url, :birthday, :gender, :bio, :searchable
+
+
   def person
     self._parent_document
   end
diff --git a/spec/controllers/people_controller_spec.rb b/spec/controllers/people_controller_spec.rb
index 853ab5553..106a74760 100644
--- a/spec/controllers/people_controller_spec.rb
+++ b/spec/controllers/people_controller_spec.rb
@@ -69,5 +69,11 @@ describe PeopleController do
         :owner_id => new_user.id}
       user.person.reload.owner_id.should_not == new_user.id
     end
+
+    it 'does not overwrite the profile diaspora handle' do
+      handle_params = {'profile' => {'diaspora_handle' => 'abc@a.com'}}
+      put :update, :id => user.person.id, :person => handle_params
+      user.person.reload.profile[:diaspora_handle].should_not == 'abc@a.com'
+    end
   end
 end