Adds admin backend for #53

client/templates/admin.html

@@ -0,0 +1,15 @@
+<template name="admin">
+  {{#if isAdmin}}
+    <h1>Admin</h1>
+
+    <a href="/">Home</a>
+
+    <form>
+      <label>Latest News</label>
+      <input name="text" type="text" value="{{latestNews.text}}" />
+      <button type="submit">Save</button>
+    </form>
+  {{else}}
+    <h1>Forbidden</h1>
+  {{/if}}
+</template>

client/templates/admin.js

@@ -0,0 +1,20 @@
+Template.admin.helpers({
+  isAdmin: function() {
+    return Meteor.user() && Meteor.user().admin;
+  },
+
+  latestNews: function() {
+    return News.latest();
+  }
+});
+
+Template.admin.events({
+  'submit form': function(event) {
+    event.preventDefault();
+
+    var text = $(event.target).find('[name=text]').val();
+    News.insert({ text: text, date: new Date });
+
+    alert('Saved latest news');
+  }
+})

client/templates/app-body.html

@@ -6,6 +6,9 @@
     <div class="description-welcome">
     When running this example on a physical phone you won't see the device chrome we've included here.
     </div>
+    <div class="description-welcome">
+    The first authenticated user is allowed access to the <a href="{{pathFor 'admin'}}">/admin</a> backend.
+    </div>
   </div>
 
   <div id="container" class="{{menuOpen}} {{overlayOpen}}">

client/templates/home.html

@@ -15,7 +15,7 @@ <h1 class="title-home">
 
       <div class="callout-news">
         <span class="title-callout">News</span>
-        {{latestNews}}
+        {{latestNews.text}}
       </div>
 
       <h2 class="list-title">Our Favorite Recipes</h2>

client/templates/home.js

@@ -17,7 +17,6 @@ Template.home.helpers({
   },
 
   latestNews: function() {
-    var news = News.findOne({}, {sort: {date: -1}, limit: 1});
-    return news && news.text;
+    return News.latest();
   }
 });

lib/news.js

@@ -1,5 +1,16 @@
 News = new Mongo.Collection('news');
 
+News.allow({
+  insert: function(userId) {
+    var user = Meteor.users.findOne(userId);
+    return user && user.admin;
+  }
+});
+
+News.latest = function() {
+  return News.findOne({}, {sort: {date: -1}, limit: 1});
+}
+
 if (Meteor.isServer && News.find().count() === 0) {
   Meteor.startup(function() {
     News.insert({

lib/router.js

@@ -60,13 +60,20 @@ RecipeController = RouteController.extend({
   }
 });
 
+AdminController = RouteController.extend({
+  onBeforeAction: function() {
+    Meteor.subscribe('news');
+  }
+});
+
 Router.map(function() {
   this.route('home', {path: '/'});
   this.route('feed');
   this.route('recipes');
   this.route('bookmarks');
   this.route('about');
   this.route('recipe', {path: '/recipes/:name'});
+  this.route('admin', { layoutTemplate: null });
 });
 
 Router.onBeforeAction('dataNotFound', {only: 'recipe'});

server/publications.js

@@ -22,10 +22,11 @@ Meteor.publish('recipe', function(name) {
   ];
 });
 
-// autopublish the user's bookmarks
+// autopublish the user's bookmarks and admin status
 Meteor.publish(null, function() {
   return Meteor.users.find(this.userId, {
     fields: {
+      admin: 1,
       bookmarkedRecipeNames: 1,
       'services.twitter.profile_image_url_https': 1
     }

server/users.js

@@ -0,0 +1,10 @@
+Accounts.onCreateUser(function(options, user) {
+  if (options.profile)
+    user.profile = options.profile;
+
+  // If this is the first user going into the database, make them an admin
+  if (Meteor.users.find().count() === 0)
+    user.admin = true;
+
+  return user;
+});