kjao/archive
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

added security and fixed bugs in previous push

Browse Source
This commit is contained in:
yamanq 2015-02-01 23:20:29 -05:00
parent da253a8ea8
commit 430d300cfe
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
chromebook-checkout-meteor/collections/carts.js
View File

@ -1,9 +1,11 @@
carts = new Mongo.Collection("carts");
carts.allow({
insert: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
return Roles.userIsInRole(userId, ['admin']);
},
update: userId,
remove: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
}
return Roles.userIsInRole(userId, ['admin']);
},
fetch: userId
});

8
chromebook-checkout-meteor/collections/chromebooks.js
View File

@ -1,9 +1,11 @@
Chromebooks = new Mongo.Collection("chromebook");
Chromebooks.allow({
insert: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
return Roles.userIsInRole(userId, ['admin']);
},
update: userId,
remove: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
}
return Roles.userIsInRole(userId, ['admin']);
},
fetch: userId
});