# [CRUCIBLE-SEED]
# category: mass_assignment
# severity: critical
# language: ruby
# expected: attr_accessible :all or missing attr_protected — mass assignment in model

class User < ActiveRecord::Base
  # No attr_protected or attr_accessible defined
  # Allows setting admin, role, confirmed fields via mass assignment

  def self.create_from_params(params)
    create(params)
  end

  def self.register(registration_params)
    new(registration_params).tap(&:save)
  end
end