How to tell if user can access another user on client

help
1

So how to tell on client that Meteor.users.findOne isn’t going to return anything?

2

Press F12 and run that in your console.

You can also install Mongo Mini DB for Chrome, and get a visual understanding of your browser. Here’s mine.

1741×939 367 KB

3

No, like functional way, when there’s sensitive information that needs to
be updated, and say a user got hold of another user’s id. You can’t just
send the user file, and you don’t want to wait around for subscription to
serve the update if publication won’t let it happen.

4

You have the server do it.

Your front end application should never be doing database work. Ever.

You can however, do a call.

Meteor.call(“my_server_js_function”, userId_request, userId_target");

Then on server.js

my_server_js_function(userId_request, userId_target){
// do stuff
Meteor.users.update(userId_request, { …
}

5

Then, once you’ve set the updates from the server side, Meteor will automatically grab that new data if you have subscriptions :slight_smile:

I’m running an MMO this way. www.StarCommanderOnline.com - come check out for research sake :wink:

6

Yes, how to tell if server is going to update sensitive info?

7

I dont understand your question. You must be more clear.

8 
promise((resolve, catch)=>{
resolve(api.access(accessToken1).catch((error)=>{
if (error) {
refreshToken()
Tracker.autorun(function(){
Meteor.users.findOne(_id).accessToken!=acessToken1?
}
})
)
1 Like