Added Soft remove and a character asset parenting system

rpg-docs/lib/constants/characterAssetAllowDeny.js

@@ -0,0 +1,24 @@
+CHARACTER_SUBSCHEMA_ALLOW = {
+	// the user must be logged in, and the user must be a writer of the character
+	insert: function (userId, doc) {
+		var char = Characters.findOne( doc.charId, { fields: {owner: 1, writers: 1} } );
+		return ( userId && char.owner === userId || _.contains(char.writers, userId) );
+	},
+	update: function (userId, doc, fields, modifier) {
+		var char = Characters.findOne( doc.charId, { fields: {owner: 1, writers: 1} } );
+		return ( userId && char.owner === userId || _.contains(char.writers, userId) );
+	},
+	remove: function (userId, doc) {
+		var char = Characters.findOne( doc.charId, { fields: {owner: 1, writers: 1} } );
+		return ( userId && char.owner === userId || _.contains(char.writers, userId) );
+	},
+	fetch: ["charId"]
+};
+
+CHARACTER_SUBSCHEMA_DENY = {
+	update: function (userId, docs, fields, modifier) {
+		// can't change character
+		return _.contains(fields, 'charId');
+	},
+	fetch: ["charId"]
+};