sudoxreboot/habitica
1
0
Fork 0
mirror of https://github.com/sudoxnym/habitica.git synced 2026-07-19 10:14:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

restrict client balance edit permissions

Browse source
This commit is contained in:
Tyler Renelle 2013-01-25 14:59:32 -05:00
parent 590fa1669c
commit a02776506f
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/server/store.coffee
View file

@ -4,11 +4,11 @@ Setup read / write access
###
module.exports = (store) ->
store.writeAccess "*", "users.*.balance", -> # captures, value, next ->
store.writeAccess "*", "users.*.balance", (id, newBalance, next) ->
return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37
next = arguments[arguments.length - 1]
purchasingSomethingOnClient = newBalance < this.session.req._racerModel.get("users.#{id}.balance")
isServer = not @req.socket
next(isServer)
next(purchasingSomethingOnClient or isServer)
store.writeAccess "*", "users.*.flags.ads", -> # captures, value, next ->
return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37