Vulcan/server/publications.js
2013-04-14 12:12:31 +09:00

133 lines
No EOL
2.7 KiB
JavaScript

Meteor.publish('currentUser', function() {
return Meteor.users.find(this.userId);
});
Meteor.publish('allUsers', function() {
if (this.userId && isAdminById(this.userId)) {
// if user is admin, publish all fields
return Meteor.users.find();
}else{
// else, filter out sensitive info
return Meteor.users.find({}, {fields: {
secret_id: false,
isAdmin: false,
emails: false,
notifications: false,
'profile.email': false,
'services.twitter.accessToken': false,
'services.twitter.accessTokenSecret': false,
'services.twitter.id': false,
'services.password': false
}});
}
});
Meteor.startup(function(){
Meteor.users.allow({
insert: function(userId, doc){
return true;
}
, update: function(userId, doc, fields, modifier){
return isAdminById(userId) || (doc._id && doc._id === userId);
}
, remove: function(userId, doc){
return isAdminById(userId) || (doc._id && doc._id === userId);
}
});
});
// Posts
// a single post, identified by id
Meteor.publish('singlePost', function(id) {
return Posts.find(id);
});
Meteor.publish('paginatedPosts', function(find, options, limit) {
options = options || {};
options.limit = limit;
// console.log('subscribing to paginated posts', find, options, limit);
return Posts.find(find || {}, options);
});
Meteor.publish('postDigest', function(date) {
var mDate = moment(date);
return findDigestPosts(mDate);
});
Meteor.startup(function(){
Posts.allow({
insert: canPostById
, update: canEditById
, remove: canEditById
});
});
// Comments
Meteor.publish('comments', function(query) {
return Comments.find(query);
});
Meteor.startup(function(){
Comments.allow({
insert: canCommentById
, update: canEditById
, remove: canEditById
});
});
// Settings
Meteor.publish('settings', function() {
return Settings.find();
});
Meteor.startup(function(){
Settings.allow({
insert: isAdminById
, update: isAdminById
, remove: isAdminById
});
});
// Notifications
Meteor.publish('notifications', function() {
// only publish notifications belonging to the current user
return Notifications.find({userId:this.userId});
});
Meteor.startup(function(){
Notifications.allow({
insert: function(userId, doc){
// new notifications can only be created via a Meteor method
return false;
}
, update: canEditById
, remove: canEditById
});
});
// Categories
Meteor.publish('categories', function() {
return Categories.find();
});
Meteor.startup(function(){
Categories.allow({
insert: isAdminById
, update: isAdminById
, remove: isAdminById
});
});