Vulcan/packages/nova-comments/lib/callbacks/callbacks_comments_edit.js

import marked from 'marked';
import Posts from "meteor/nova:posts";
import Users from 'meteor/nova:users';
import { addCallback, Utils } from 'meteor/nova:core';

// ------------------------------------- comments.edit.validate -------------------------------- //

function CommentsEditUserCheck (modifier, comment, user) {
  if (!user || !Users.canEdit(user, comment)) {
    throw new Meteor.Error(601, 'sorry_you_cannot_edit_this_comment');
  }
  return modifier;
}
addCallback("comments.edit.validate", CommentsEditUserCheck);

function CommentsEditSubmittedPropertiesCheck (modifier, comment, user) {
  const schema = Posts.simpleSchema()._schema;
  // go over each field and throw an error if it's not editable
  // loop over each operation ($set, $unset, etc.)
  _.each(modifier, function (operation) {
    // loop over each property being operated on
    _.keys(operation).forEach(function (fieldName) {

      var field = schema[fieldName];
      if (!Users.canEditField(user, field, comment)) {
        throw new Meteor.Error("disallowed_property", 'disallowed_property_detected' + ": " + fieldName);
      }

    });
  });
  return modifier;
}
addCallback("comments.edit.validate", CommentsEditSubmittedPropertiesCheck);


// ------------------------------------- comments.edit.sync -------------------------------- //

function CommentsEditGenerateHTMLBody (modifier, comment, user) {
  // if body is being modified, update htmlBody too
  if (modifier.$set && modifier.$set.body) {
    modifier.$set.htmlBody = Utils.sanitize(marked(modifier.$set.body));
  }
  return modifier;
}
addCallback("comments.edit.sync", CommentsEditGenerateHTMLBody);