diff --git a/src/server/store.coffee b/src/server/store.coffee index 69d8567e70..4063c4bfaa 100644 --- a/src/server/store.coffee +++ b/src/server/store.coffee @@ -4,11 +4,11 @@ Setup read / write access ### module.exports = (store) -> - store.writeAccess "*", "users.*.balance", -> # captures, value, next -> + store.writeAccess "*", "users.*.balance", (id, newBalance, next) -> return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37 - next = arguments[arguments.length - 1] + purchasingSomethingOnClient = newBalance < this.session.req._racerModel.get("users.#{id}.balance") isServer = not @req.socket - next(isServer) + next(purchasingSomethingOnClient or isServer) store.writeAccess "*", "users.*.flags.ads", -> # captures, value, next -> return unless @session and @session.userId # https://github.com/codeparty/racer/issues/37