diff options
author | Maxime Quandalle <maxime@quandalle.com> | 2015-09-08 20:19:42 +0200 |
---|---|---|
committer | Maxime Quandalle <maxime@quandalle.com> | 2015-09-08 20:19:42 +0200 |
commit | 45b662a1ddb46a0f17fab7b2383c82aa1e1620ef (patch) | |
tree | cc7be215c7e7ebffd2597df70cf271b3dd435e1a /collections/users.js | |
parent | c04341f1ea5efe082bf7318cf9eb0e99b9b8374a (diff) | |
download | wekan-45b662a1ddb46a0f17fab7b2383c82aa1e1620ef.tar.gz wekan-45b662a1ddb46a0f17fab7b2383c82aa1e1620ef.tar.bz2 wekan-45b662a1ddb46a0f17fab7b2383c82aa1e1620ef.zip |
Centralize all mutations at the model level
This commit uses a new package that I need to document. It tries to
solve the long-standing debate in the Meteor community about
allow/deny rules versus methods (RPC).
This approach gives us both the centralized security rules of
allow/deny and the white-list of allowed mutations similarly to Meteor
methods. The idea to have static mutation descriptions is also
inspired by Facebook's Relay/GraphQL.
This will allow the development of a REST API using the high-level
methods instead of the MongoDB queries to do the mapping between the
HTTP requests and our collections.
Diffstat (limited to 'collections/users.js')
-rw-r--r-- | collections/users.js | 151 |
1 files changed, 0 insertions, 151 deletions
diff --git a/collections/users.js b/collections/users.js deleted file mode 100644 index fa910c4a..00000000 --- a/collections/users.js +++ /dev/null @@ -1,151 +0,0 @@ -Users = Meteor.users; - -// Search a user in the complete server database by its name or username. This -// is used for instance to add a new user to a board. -const searchInFields = ['username', 'profile.name']; -Users.initEasySearch(searchInFields, { - use: 'mongo-db', - returnFields: [...searchInFields, 'profile.avatarUrl'], -}); - -Users.helpers({ - boards() { - return Boards.find({ userId: this._id }); - }, - - starredBoards() { - const starredBoardIds = this.profile.starredBoards || []; - return Boards.find({archived: false, _id: {$in: starredBoardIds}}); - }, - - hasStarred(boardId) { - const starredBoardIds = this.profile.starredBoards || []; - return _.contains(starredBoardIds, boardId); - }, - - isBoardMember() { - const board = Boards.findOne(Session.get('currentBoard')); - return board && _.contains(_.pluck(board.members, 'userId'), this._id) && - _.where(board.members, {userId: this._id})[0].isActive; - }, - - isBoardAdmin() { - const board = Boards.findOne(Session.get('currentBoard')); - return board && this.isBoardMember(board) && - _.where(board.members, {userId: this._id})[0].isAdmin; - }, - - getInitials() { - const profile = this.profile || {}; - if (profile.initials) - return profile.initials; - - else if (profile.fullname) { - return _.reduce(profile.fullname.split(/\s+/), (memo, word) => { - return memo + word[0]; - }, '').toUpperCase(); - - } else { - return this.username[0].toUpperCase(); - } - }, - - toggleBoardStar(boardId) { - const queryKind = this.hasStarred(boardId) ? '$pull' : '$addToSet'; - Meteor.users.update(this._id, { - [queryKind]: { - 'profile.starredBoards': boardId, - }, - }); - }, -}); - -Meteor.methods({ - setUsername(username) { - check(username, String); - const nUsersWithUsername = Users.find({ username }).count(); - if (nUsersWithUsername > 0) { - throw new Meteor.Error('username-already-taken'); - } else { - Users.update(this.userId, {$set: { username }}); - } - }, -}); - -Users.before.insert((userId, doc) => { - doc.profile = doc.profile || {}; - - if (!doc.username && doc.profile.name) { - doc.username = doc.profile.name.toLowerCase().replace(/\s/g, ''); - } -}); - -if (Meteor.isServer) { - // Let mongoDB ensure username unicity - Meteor.startup(() => { - Users._collection._ensureIndex({ - username: 1, - }, { unique: true }); - }); - - // Each board document contains the de-normalized number of users that have - // starred it. If the user star or unstar a board, we need to update this - // counter. - // We need to run this code on the server only, otherwise the incrementation - // will be done twice. - Users.after.update(function(userId, user, fieldNames) { - // The `starredBoards` list is hosted on the `profile` field. If this - // field hasn't been modificated we don't need to run this hook. - if (!_.contains(fieldNames, 'profile')) - return; - - // To calculate a diff of board starred ids, we get both the previous - // and the newly board ids list - function getStarredBoardsIds(doc) { - return doc.profile && doc.profile.starredBoards; - } - const oldIds = getStarredBoardsIds(this.previous); - const newIds = getStarredBoardsIds(user); - - // The _.difference(a, b) method returns the values from a that are not in - // b. We use it to find deleted and newly inserted ids by using it in one - // direction and then in the other. - function incrementBoards(boardsIds, inc) { - _.forEach(boardsIds, (boardId) => { - Boards.update(boardId, {$inc: {stars: inc}}); - }); - } - incrementBoards(_.difference(oldIds, newIds), -1); - incrementBoards(_.difference(newIds, oldIds), +1); - }); - - // XXX i18n - Users.after.insert((userId, doc) => { - const ExampleBoard = { - title: 'Welcome Board', - userId: doc._id, - permission: 'private', - }; - - // Insert the Welcome Board - Boards.insert(ExampleBoard, (err, boardId) => { - - _.forEach(['Basics', 'Advanced'], (title) => { - const list = { - title, - boardId, - userId: ExampleBoard.userId, - - // XXX Not certain this is a bug, but we except these fields get - // inserted by the Lists.before.insert collection-hook. Since this - // hook is not called in this case, we have to dublicate the logic and - // set them here. - archived: false, - createdAt: new Date(), - }; - - Lists.insert(list); - }); - }); - }); -} |