NoamB/sorcery — Issue #194: It seems attr_accessible is no longer needed for activity
Author: pupeno
Created: 2012-01-20 10:10:59+00:00
State: open

According to the documentation here:

https://github.com/NoamB/sorcery/wiki/Activity-logging

the activity fields must be attr_accessible, which for me, sounds like a bad idea. It allows users to modify them if they craft a post request. So I didn't do it and it worked anyway, which I'm happy about. Should that warning at the bottom of the documentation be removed or am I missing something?