Vulcan/packages/vulcan-users/lib/mutations.js

import { newMutation, editMutation, removeMutation, Utils } from 'meteor/vulcan:lib';
import Users from './collection'; // circular dependency?

const performCheck = (mutation, user, document) => {
  if (!mutation.check(user, document)) throw new Error(Utils.encodeIntlError({id: `app.mutation_not_allowed`, value: `"${mutation.name}" on _id "${document._id}"`}));
};

const mutations = {

  new: {
    
    name: 'usersNew',
    
    check(user, document) {
      if (!user) return false;
      return Users.canDo(user, 'users.new');
    },
    
    mutation(root, {document}, context) {
      
      performCheck(this, context.currentUser, document);

      return newMutation({
        collection: context.Users,
        document: document, 
        currentUser: context.currentUser,
        validate: true,
        context,
      });
    },

  },

  edit: {
    
    name: 'usersEdit',
    
    check(user, document) {
      if (!user || !document) return false;
      return Users.owns(user, document) ? Users.canDo(user, 'users.edit.own') : Users.canDo(user, `users.edit.all`);
    },

    mutation(root, {documentId, set, unset}, context) {

      const document = context.Users.findOne(documentId);
      performCheck(this, context.currentUser, document);

      return editMutation({
        collection: context.Users, 
        documentId: documentId, 
        set: set, 
        unset: unset, 
        currentUser: context.currentUser,
        validate: true,
        context,
      });
    },

  },
  
  remove: {

    name: 'usersRemove',
    
    check(user, document) {
      if (!user || !document) return false;
      return Users.owns(user, document) ? Users.canDo(user, 'users.remove.own') : Users.canDo(user, `users.remove.all`);
    },
    
    mutation(root, {documentId}, context) {

      const document = context.Users.findOne(documentId);
      performCheck(this, context.currentUser, document);

      return removeMutation({
        collection: context.Users, 
        documentId: documentId, 
        currentUser: context.currentUser,
        validate: true,
        context,
      });
    },

  },

};

export default mutations;