2013-01-25 19:18:17 +00:00
|
|
|
###
|
|
|
|
|
Setup read / write access
|
|
|
|
|
@param store
|
|
|
|
|
###
|
|
|
|
|
module.exports = (store) ->
|
|
|
|
|
|
2013-01-25 19:59:32 +00:00
|
|
|
store.writeAccess "*", "users.*.balance", (id, newBalance, next) ->
|
2013-01-25 19:18:17 +00:00
|
|
|
return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37
|
2013-01-25 19:59:32 +00:00
|
|
|
purchasingSomethingOnClient = newBalance < this.session.req._racerModel.get("users.#{id}.balance")
|
2013-01-25 19:18:17 +00:00
|
|
|
isServer = not @req.socket
|
2013-01-25 19:59:32 +00:00
|
|
|
next(purchasingSomethingOnClient or isServer)
|
2013-01-25 19:18:17 +00:00
|
|
|
|
|
|
|
|
store.writeAccess "*", "users.*.flags.ads", -> # captures, value, next ->
|
|
|
|
|
return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37
|
|
|
|
|
next = arguments[arguments.length - 1]
|
|
|
|
|
isServer = not @req.socket
|
|
|
|
|
next(isServer)
|