Qwaiter in the green 💚

app/controllers/admin/tables_controller.rb

@@ -6,46 +6,46 @@ module Admin
     # GET /tables.json
     def index
       @tables = Table.all
-  
+
       respond_to do |format|
         format.html # index.html.erb
         format.json { render json: @tables }
       end
     end
-  
+
     # GET /tables/1
     # GET /tables/1.json
     def show
       @table = Table.find(params[:id])
-  
+
       respond_to do |format|
         format.html # show.html.erb
         format.json { render json: @table }
       end
     end
-  
+
     # GET /tables/new
     # GET /tables/new.json
     def new
       @table = Table.new
-  
+
       respond_to do |format|
         format.html # new.html.erb
         format.json { render json: @table }
       end
     end
-  
+
     # GET /tables/1/edit
     def edit
       @table = Table.find(params[:id])
     end
-  
+
     # POST /tables
     # POST /tables.json
     def create
-      @table = Table.new(params[:table])
+      @table = Table.new(table_params)
       @table.supplier_id = params[:table][:supplier_id]
-  
+
       respond_to do |format|
         if @table.save
           format.html { redirect_to [:admin, @table], notice: t('action.create.successfull', model: Table.model_name.human) }
@@ -56,14 +56,14 @@ module Admin
         end
       end
     end
-  
+
     # PUT /tables/1
     # PUT /tables/1.json
     def update
       @table = Table.find(params[:id])
-  
+
       respond_to do |format|
-        if @table.update_attributes(params[:table])
+        if @table.update_attributes(table_params)
           format.html { redirect_to [:admin, @table], notice: t('action.update.successfull', model: Table.model_name.human) }
           format.json { head :no_content }
         else
@@ -72,24 +72,28 @@ module Admin
         end
       end
     end
-  
+
     # DELETE /tables/1
     # DELETE /tables/1.json
     def destroy
       @table = Table.find(params[:id])
       @table.destroy
-  
+
       respond_to do |format|
         format.html { redirect_to admin_tables_url, notice: t('action.destroy.successfull', model: Table.model_name.human) }
         format.json { head :no_content }
       end
     end
-  
+
     private
-  
+
     def set_relation_options
       @suppliers = Supplier.all
       @lists = List.all
     end
+
+    def table_params
+      params.require(:table).permit!
+    end
   end
 end