From 7cbfc4aa9263e84c989fb231d699dff7287ea7f8 Mon Sep 17 00:00:00 2001
From: Martin Edenhofer <me@edenhofer.de>
Date: Mon, 1 Sep 2014 15:09:43 +0200
Subject: [PATCH] Permit nested conditions.

---
 app/controllers/tickets_controller.rb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/controllers/tickets_controller.rb b/app/controllers/tickets_controller.rb
index eb5fd344a..7b380ebab 100644
--- a/app/controllers/tickets_controller.rb
+++ b/app/controllers/tickets_controller.rb
@@ -355,6 +355,9 @@ class TicketsController < ApplicationController
   # GET /api/v1/tickets/search
   def search
 
+    # permit nested conditions
+    params.require(:condition).permit!
+
     # build result list
     tickets = Ticket.search(
       :limit        => params[:limit],