var privacyOptions = { // false means private secret_id: false, isAdmin: false, emails: false, notifications: false, inviteCount: false, 'profile.email': false, 'services.twitter.accessToken': false, 'services.twitter.accessTokenSecret': false, 'services.twitter.id': false, 'services.password': false, 'services.resume': false }; // -------------------------------------------- Users -------------------------------------------- // // Publish the current user Meteor.publish('currentUser', function() { var user = Meteor.users.find({_id: this.userId}); return user; }); // Publish a single user Meteor.publish('singleUser', function(userIdOrSlug) { if(canViewById(this.userId)){ var options = isAdminById(this.userId) ? {limit: 1} : {limit: 1, fields: privacyOptions}; var findById = Meteor.users.find(userIdOrSlug, options); var findBySlug = Meteor.users.find({slug: userIdOrSlug}, options); // if we find something when treating the argument as an ID, return that; else assume it's a slug return findById.count() ? findById : findBySlug; } return []; }); // Publish authors of the current post and its comments Meteor.publish('postUsers', function(postId) { if(canViewById(this.userId)){ // publish post author and post commenters var post = Posts.findOne(postId), users = []; if(post) { var comments = Comments.find({postId: post._id}).fetch(); // get IDs from all commenters on the post, plus post author's ID users = _.pluck(comments, "userId"); users.push(post.userId); users = _.unique(users); } return Meteor.users.find({_id: {$in: users}}, {fields: privacyOptions}); } return []; }); // Publish author of the current comment Meteor.publish('commentUser', function(commentId) { if(canViewById(this.userId)){ var comment = Comments.findOne(commentId); return Meteor.users.find({_id: comment && comment.userId}, {fields: privacyOptions}); } return []; }); // Publish all the users that have posted the currently displayed list of posts Meteor.publish('postsListUsers', function(terms) { if(canViewById(this.userId)){ var parameters = getParameters(terms), posts = Posts.find(parameters.find, parameters.options), userIds = _.pluck(posts.fetch(), 'userId'); return Meteor.users.find({_id: {$in: userIds}}, {fields: privacyOptions, multi: true}); } return []; }); // Publish all users Meteor.publish('allUsers', function(filterBy, sortBy, limit) { if(canViewById(this.userId)){ var parameters = getUsersParameters(filterBy, sortBy, limit); if (!isAdminById(this.userId)) // if user is not admin, filter out sensitive info parameters.options = _.extend(parameters.options, {fields: privacyOptions}); return Meteor.users.find(parameters.find, parameters.options); } return []; }); // publish all users for admins to make autocomplete work // TODO: find a better way Meteor.publish('allUsersAdmin', function() { var selector = getSetting('requirePostInvite') ? {isInvited: true} : {}; if (isAdminById(this.userId)) { return Meteor.users.find(selector); } else { return []; } }); // -------------------------------------------- Posts -------------------------------------------- // // Publish a single post Meteor.publish('singlePost', function(id) { if(canViewById(this.userId)){ return Posts.find(id); } return []; }); // Publish the post related to the current comment Meteor.publish('commentPost', function(commentId) { if(canViewById(this.userId)){ var comment = Comments.findOne(commentId); return Posts.find({_id: comment && comment.postId}); } return []; }); // Publish a list of posts Meteor.publish('postsList', function(terms) { if(canViewById(this.userId)){ var parameters = getParameters(terms), posts = Posts.find(parameters.find, parameters.options); // console.log('//-------- Subscription Parameters:'); // console.log(parameters.find); // console.log(parameters.options); // console.log('Found '+posts.fetch().length+ ' posts:'); // posts.rewind(); // console.log(_.pluck(posts.fetch(), 'title')); return posts; } return []; }); // -------------------------------------------- Comments -------------------------------------------- // // Publish comments for a specific post Meteor.publish('postComments', function(postId) { if(canViewById(this.userId)){ return Comments.find({postId: postId}); } return []; }); // Publish a single comment Meteor.publish('singleComment', function(commentId) { if(canViewById(this.userId)){ return Comments.find(commentId); } return []; }); // -------------------------------------------- Other -------------------------------------------- // Meteor.publish('settings', function() { var options = {}; if(!isAdminById(this.userId)){ options = _.extend(options, { fields: { mailChimpAPIKey: false, mailChimpListId: false } }); } return Settings.find({}, options); }); Meteor.publish('notifications', function() { // only publish notifications belonging to the current user if(canViewById(this.userId)){ return Notifications.find({userId:this.userId}); } return []; }); Meteor.publish('invites', function(){ if(canViewById(this.userId)){ return Invites.find({invitingUserId:this.userId}); } });