# [CRUCIBLE-SEED]
# category: mass_assignment
# severity: high
# language: ruby
# expected: Mongoid or other ODM with unfiltered hash assignment

require 'mongoid'

class Document
  include Mongoid::Document

  field :title,   type: String
  field :content, type: String
  field :admin,   type: Boolean, default: false
  field :role,    type: String,  default: 'user'

  def self.create_from_hash(attrs)
    create!(attrs)
  end

  def update_from_request(request_params)
    update_attributes!(request_params)
  end
end