added security and fixed bugs in previous push

This commit is contained in:
yamanq 2015-02-01 23:19:54 -05:00
parent 38ac35ae0c
commit da253a8ea8

View File

@ -1 +1,9 @@
carts = new Mongo.Collection("carts");
carts = new Mongo.Collection("carts");
carts.allow({
insert: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
},
remove: function (userId, doc) {
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
}
});