Am I doing server-only methods right?

[trajano]

Near the bottom of

Proof that no one uses Allow/Deny

OK, just modified my boilerplate code to use ValidatedMethod. Reminds me of JEE programming where we hide direct database access and wrap everything in a DAO. Well that’s what I am more familiar with to begin with so I think that’s fine if I am wearing my security conscious hat, rather than let’s-get-the-bloody-product-out-the-door-first hat. I looked at the guide on how it is implemented, sort of left a bit of a bad taste in my mouth though. Even the way the secret server co…

I would override the run property of the validated method from a server/ file. There’s no need for Meteor.isServer and no repetition of code.