Vulcan/server/publish.js

var isLoggedIn = function(userId, doc){
  return !! Meteor.userId();
}

Meteor.publish('currentUser', function() {
  return Meteor.users.find(this.userId);
});
Meteor.publish('allUsers', function() {
  if (this.userId && isAdminById(this.userId)) {
    // if user is admin, publish all fields
    return Meteor.users.find();
  }else{
    // else, filter out sensitive info
    return Meteor.users.find({}, {fields: {
      secret_id: false,
      isAdmin: false,
      emails: false,
      notifications: false,
      'profile.email': false,
      'services.twitter.accessToken': false,
      'services.twitter.accessTokenSecret': false,
      'services.twitter.id': false,
      'services.password': false
    }});
  }
});

Meteor.startup(function(){
  Meteor.users.allow({
      insert: function(userId, doc){
        return true;
      }
    , update: function(userId, doc, fields, modifier){
        return isAdminById(userId) || (doc._id && doc._id === userId);
      }
    , remove: function(userId, doc){
        return isAdminById(userId) || (doc._id && doc._id === userId);
      }
  });
});

// Posts

Posts = new Meteor.Collection('posts');

// a single post, identified by id
Meteor.publish('post', function(id) {
  return Posts.find(id);
});

Meteor.publish('paginatedPosts', function(find, options, limit) {
  options = options || {};
  options.limit = limit;

  return Posts.find(find || {}, options);
});

Meteor.startup(function(){
  Posts.allow({
      insert: canPostById
    , update: canEditById
    , remove: canEditById
  });
});

// Comments

Comments = new Meteor.Collection('comments');

Meteor.publish('comments', function(query) {
  return Comments.find(query);
});

Meteor.startup(function(){
  Comments.allow({
      insert: canCommentById
    , update: canEditById
    , remove: canEditById
  });
});

// Settings

Settings = new Meteor.Collection('settings');

Meteor.publish('settings', function() {
  return Settings.find();
});

Meteor.startup(function(){
  Settings.allow({
      insert: isAdminById
    , update: isAdminById
    , remove: isAdminById
  });
});


// Notifications

Notifications = new Meteor.Collection('notifications');

Meteor.publish('notifications', function() {
  // only publish notifications belonging to the current user
  return Notifications.find({userId:this.userId});
});

Meteor.startup(function(){
  Notifications.allow({
      insert: function(userId, doc){
        // new notifications are created via a Meteor method
        return false;
      }
    , update: canEditById
    , remove: canEditById
  });
});

// Categories

Categories = new Meteor.Collection('categories');

Meteor.publish('categories', function() {
  return Categories.find();
});

Meteor.startup(function(){
  Categories.allow({
      insert: isAdminById
    , update: isAdminById
    , remove: isAdminById
  });
});