3scale/issues-test — Issue #504: Account#provider_account_id is not protected attribute
Author: HakubJozak
Created: 2012-02-10 18:02:49+00:00
State: open
Labels: bug, security

provider_account_id is not protected attribute

buyers can transfer their account to different provider just by updating profile

protecting attribute can break things (api?),

Tasks
- mark provider_account_id as protected attr
- test api, account creation and other parts of system

https://www.pivotaltracker.com/story/show/22078409