Comments (4)
Cool idea. It should be possible to support method security, with lots of monkey-patching of Meteor internals.
@raix created https://github.com/DispatchMe/meteor-restricted-find to pull read security into allow/deny. A similar package could pull method security into allow/deny.
Then there would be a single security layer for Meteor, which ongoworks:security could wrap for a simple chainable API.
from meteor-security.
I like the idea of a single security layer with a chainable api. maybe we could extend check
like @raix find
?
from meteor-security.
Maybe look at using
https://github.com/matteodem/meteor-easy-security to accomplish this.
It has hooks for methods and you could then call in the hook.
return Roles.userIsInRole(this.userId, [role, roles], group)
from meteor-security.
Server side support added by 4a4c0ba in 1.3.0. See Readme.
from meteor-security.
Related Issues (20)
- vsivsi:file-collection compatibility HOT 1
- TypeError: Object #<SecurityRuleConstructor> has no method 'ifHasRole' HOT 3
- How to express this security setup? HOT 5
- 1.3.0 not working with Meteor.roles HOT 4
- connection inside defined method HOT 1
- Defined method's doc is not fetched when using Security.can() HOT 2
- question: upsert
- Conflict with matb33:meteor-collection-hooks prevents startup HOT 2
- Can Read? HOT 4
- Way to go about updating from a collection hook HOT 2
- Question - Best way to access user profile in defineMethod HOT 1
- Create exception for collection-hooks package HOT 1
- Document is inserted then removed HOT 1
- Transition to npm? HOT 3
- .allowInClientCode() unexpectedly applies to all rules of that type HOT 1
- setOnInsert not allowed in a restricted collection HOT 1
- Don't work, I base on `[email protected] + Vue` HOT 1
- Could I use "Rate Limiting" with this? HOT 2
- Security issue with update and remove HOT 2
- Client-side Security....check() always returns true HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from meteor-security.