Allowing update but preventing a column from being allowed in the update? - ruby-on-rails

Question

I want to allow an update but want to exclude the update of a specific column and create it's own update method.
Question: Is there a way for me to define my order params but exclude a specific column? Or even separate the columns into methods?
def order_params
params.require(:order).permit(:name, :email, :image, :video, :description)
end
My issue is that, I have a stripe charge in my update method so when i simply update an orders "order_status", the customer gets charged.
I have a column "order_status" which can be changed by enum 1,2,3 and i want to avoid that within it the update so no charge is made.
I created:
def order_status
params.permit(:order_status)
end
But since the original order_params has :orders, the order status is still being included.
I have the enum as, "created", "charged", and "cancelled". A seller can cancel an order with:
<%= form_for #order, remote: true do |f| %>
<%= f.hidden_field :order_status, value: "cancelled" %>
<%= f.button type:'submit', class: "btn btn-danger", onclick: "refreshPage()" %>
<% end %>
What should i do to have this "order_status" update be on its own and out of the original update method so customers don't get charged?
Update:
I did find a way to simply create it's own method for charging and taking the charge out of the update method with all the params..
def charge_update
respond_to do |format|
#amount = (#order.order_price).to_i * 100
#amount_seller = (#order.order_price).to_i * 75
if #order.update(params[:tracking_number])
if user_signed_in?
charge = Stripe::Charge.create({
:amount => (#order.order_price).to_i * 100,
:description => 'Rails Stripe customer',
:currency => 'usd',
:customer => #order.stripe_customer_token,
:destination => {
:amount => #amount_seller ,
:account => (#order.seller.stripe_token),
}
})
#order.order_status = "charged"
format.html { redirect_to #order, notice: 'Order was successfully uploaded.' }
format.json { render :show, status: :ok, location: #order }
else
format.html { render :edit }
format.json { render json: #order.errors, status: :unprocessable_entity }
end
end
end
end
The customer only gets charged once the order is sent.
But, how can i specify the params status itself?
For instance, I want to create a method for the order_status, but only for when the order_status = "cancelled"... and then create 2 more methods for the other 2 possibly status'
?
So when I/seller cancels an order, I can create a custom message, send emails, etc. and do the same for "charged", and "created"....

Answer 1

Is there a way for me to define my order params but exclude a specific
column?
Easy. The #except method can be used to remove a key or keys from the (whitelisted) params hash.
order_params.except(:order_status)
Or even separate the columns into methods?
One thing to remember is that ActionController::Parameters is actually a pretty basic hash like object and you can compose your whitelist functions however you want.
#permit works somewhat like Hash#slice on steroids - it returns a new ActionController::Parameters instance with the permitted attribute set to true. It also takes a hash argument for nested parameters.
You can use also use arrays to compose whitelists from different methods. This can be pretty nifty since all the methods in ActionController::Parameters are reductive. The trick is using the splat(*) operator to convert the array to a list of arguments:
def base_parameters
[:a, :b, :c, :d]
end
def others
[:e, :f]
end
def create_parameters
params.require(:order)
.permit(*base_parameters.concat(others))
end