added security and fixed bugs in previous push
This commit is contained in:
parent
38ac35ae0c
commit
da253a8ea8
@ -1 +1,9 @@
|
||||
carts = new Mongo.Collection("carts");
|
||||
carts = new Mongo.Collection("carts");
|
||||
carts.allow({
|
||||
insert: function (userId, doc) {
|
||||
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
|
||||
},
|
||||
remove: function (userId, doc) {
|
||||
return Roles.userIsInRole(Meteor.user()._id, ['admin']);
|
||||
}
|
||||
});
|
||||
Loading…
x
Reference in New Issue
Block a user