Get rid of allow deny #11966
jankapunkt
started this conversation in
Feature Requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Note:
This is a bit related to the discussion on #11505 since this also affects the Mongo API
Background
I was digging into the Mongo code to find the source of an issue. By the time I found, that due to the isomorphic API
Mongo delegates the operation calls to a method named
Collection.prototype._callMutatorMethod
:Code:
This method is part of allow-deny and makes sure, that all the calls go through the allow-deny check:
https://github.com/meteor/meteor/blob/devel/packages/allow-deny/allow-deny.js#L416
Now I think we are far beyond the point where direct updates from client to the server should be supported at all. However, I see that we still need the isomorphic API
I therefore propose the following:
Does this make sense somehow?
Beta Was this translation helpful? Give feedback.
All reactions