MattiSG

France

mattischneider.fr

Age: 24

Eclectic engineer. Building software, studying humans, designing interactions, thinking society.

2d
comment How to add a template to body in Meteor inside a package
You should accept your own answer, so the question shows up as “solved” and is better ranked :)
Dec
15
comment Meteor JS: use external script
Adding a heavy external lib for a core functionality is not viable.
Dec
12
accepted Meteor method vs. deny/allow rules
Dec
11
comment Meteor method vs. deny/allow rules
Thanks for the precision!
Dec
10
comment Meteor method vs. deny/allow rules
Well, I was disagreeing ;) But I guess that was a misinterpretation. I read “mutating database from untrusted code” as something potentially dangerous, which it is not if the only possible consequence is for the client to change its own database. My earlier point was: calling rules “client-side” reads as if it was client-only, which it isn't :)
Dec
9
comment Meteor method vs. deny/allow rules
“When a client calls insert, update, or remove on a collection, the collection's allow and deny callbacks are called on the server to determine if the write should be allowed.” — source. It would be totally useless otherwise ;)
Dec
7
comment Meteor method vs. deny/allow rules
Great answer, thanks a lot. Not accepting immediately to leave room for other possible answers. One question though: why do you call allow/deny rules “client-side operations”? Indeed, they can be simulated, but AFAIK are also executed on the server (it would be pretty insecure otherwise). Perhaps is it just a matter of phrasing, as in opposition to methods which are purely server-side (even if they can be stubbed), but it could be misleading to a less-informed reader.
Dec
6
asked Meteor method vs. deny/allow rules
Dec
6
comment Meteor: Customizing errors messages from allow and deny rules
As a sidenote: the HTTP error code you send should be a 403 (“forbidden”) rather than a 404 (“not found”) ;)
Dec
6
comment Meteor: Customizing errors messages from allow and deny rules
No, allow rules are defined per modification type (insert, update, remove). Since a modification can be of only one type, there is no way multiple allow rules may be checked against.
Nov
18
awarded Yearling
Nov
18
awarded Yearling
Nov
18
awarded Yearling
Nov
18
awarded Yearling
Sep
30
awarded Explainer
Sep
30
awarded Explainer
Sep
30
awarded Explainer
Sep
17
awarded Enlightened
Sep
17
awarded Nice Answer
Sep
12
answered What is the mime type for markdown?
1 2 3 4 5