46 lines
1.2 KiB
JavaScript
46 lines
1.2 KiB
JavaScript
import { ValidatedMethod } from 'meteor/mdg:validated-method';
|
|
import { RateLimiterMixin } from 'ddp-rate-limiter-mixin';
|
|
import Creatures from '/imports/api/creature/creatures/Creatures.js';
|
|
import {assertEditPermission} from '/imports/api/sharing/sharingPermissions.js';
|
|
|
|
const updateCreature = new ValidatedMethod({
|
|
name: 'creatures.update',
|
|
validate({_id, path}){
|
|
if (!_id) return false;
|
|
// Allowed fields
|
|
let allowedFields = [
|
|
'name',
|
|
'alignment',
|
|
'gender',
|
|
'picture',
|
|
'avatarPicture',
|
|
'color',
|
|
'settings',
|
|
];
|
|
if (!allowedFields.includes(path[0])){
|
|
throw new Meteor.Error('Creatures.methods.update.denied',
|
|
'This field can\'t be updated using this method');
|
|
}
|
|
},
|
|
mixins: [RateLimiterMixin],
|
|
rateLimit: {
|
|
numRequests: 5,
|
|
timeInterval: 5000,
|
|
},
|
|
run({_id, path, value}) {
|
|
let creature = Creatures.findOne(_id);
|
|
assertEditPermission(creature, this.userId);
|
|
if (value === undefined || value === null){
|
|
Creatures.update(_id, {
|
|
$unset: {[path.join('.')]: 1},
|
|
});
|
|
} else {
|
|
Creatures.update(_id, {
|
|
$set: {[path.join('.')]: value},
|
|
});
|
|
}
|
|
},
|
|
});
|
|
|
|
export default updateCreature;
|