MattiSG

France

mattischneider.fr

Age: 25

Eclectic engineer. Building software, studying humans, designing interactions, thinking society.

1d
asked How to allow Travis-CI access to a GitHub organisation with restricted applications access?
1d
answered How to allow Travis-CI access to a GitHub organisation with restricted applications access?
Feb
27
asked What is git hawser?
Feb
27
answered What is git hawser?
Feb
26
awarded Nice Answer
Jan
28
awarded Yearling
Jan
28
awarded Yearling
Jan
24
awarded Nice Answer
Jan
16
awarded Popular Question
Jan
6
comment Meteor JS: use external script
@RuneJeppesen They changed phrasing in docs. It used to have a red warning along the lines of “even though this library is included by the framework, you should opt-in for it, as we might change it”, for Underscore and a few other packages.
Dec
29
answered Making a template helper reactive in Meteor
Dec
16
comment How to add a template to body in Meteor inside a package
You should accept your own answer, so the question shows up as “solved” and is better ranked :)
Dec
15
comment Meteor JS: use external script
Adding a heavy external lib for a core functionality is not viable.
Dec
12
accepted Meteor method vs. deny/allow rules
Dec
11
comment Meteor method vs. deny/allow rules
Thanks for the precision!
Dec
10
comment Meteor method vs. deny/allow rules
Well, I was disagreeing ;) But I guess that was a misinterpretation. I read “mutating database from untrusted code” as something potentially dangerous, which it is not if the only possible consequence is for the client to change its own database. My earlier point was: calling rules “client-side” reads as if it was client-only, which it isn't :)
Dec
9
comment Meteor method vs. deny/allow rules
“When a client calls insert, update, or remove on a collection, the collection's allow and deny callbacks are called on the server to determine if the write should be allowed.” — source. It would be totally useless otherwise ;)
Dec
7
comment Meteor method vs. deny/allow rules
Great answer, thanks a lot. Not accepting immediately to leave room for other possible answers. One question though: why do you call allow/deny rules “client-side operations”? Indeed, they can be simulated, but AFAIK are also executed on the server (it would be pretty insecure otherwise). Perhaps is it just a matter of phrasing, as in opposition to methods which are purely server-side (even if they can be stubbed), but it could be misleading to a less-informed reader.
Dec
6
asked Meteor method vs. deny/allow rules
Dec
6
comment Meteor: Customizing errors messages from allow and deny rules
As a sidenote: the HTTP error code you send should be a 403 (“forbidden”) rather than a 404 (“not found”) ;)
1 2 3 4 5