Example of user permission checking function (protected attribute) about meteor-files HOT 12 CLOSED

Collections.files = new Meteor.Files
  debug:            false
  throttle:         256*256*64
  chunkSize:        256*256*4
  storagePath:      '/Volumes/HD/mac/storage'
  collectionName:   'uploadedFiles'
  allowClientCode:  false
  protected: ->
    if Meteor.isClient
      return true
    else if @request
      fileId = @request.originalUrl.match(/\/([^\/]*)\..*/)[1]
      file = Collections.files.findOne(fileId) 
      console.log @userId #undefined
      console.log @user() #undefined
      # Place for advanced permission checking
      # Need to compare file.meta.userId with http session's user
      # As well as other security checking
    return false

      template.uploadInstance.set Collections.files.insert 
        file: files[0]
        meta: {userId: Meteor.userId(), theme: theme, expireAt: new Date(created_at + _app.storeTTL), created_at, downloads: 0}
        onUploaded: (error, fileObj) ->
          done = true
          Meteor.call "convert", fileObj
          template.error.set error.reason if error
          template.uploadInstance.set false
        onAbort: ->
          done = true
          template.uploadInstance.set false
        onBeforeUpload: -> if @size <= 100000 * 10 * 128 then true else "Max. file size is 128MB you've tried to upload #{filesize(@size)}"
        streams: 8
      false

  protected: (fileObj) ->
    if Meteor.isClient
      return true
    else if @request
      #fileId = @request.originalUrl.match(/\/([^\/]*)\..*/)[1]
      #file = Collections.files.findOne(fileId)
      console.log @userId #undefined
      console.log @user() #undefined
      # Place for advanced permission checking
      # I don't understand the behaviour of the next two lines
      console.log "File", fileObj # fileObj is null if the next return call is false ?? 
      return true # If true, fileObj is set in the previous line

[email protected]
[email protected]
[email protected]
[email protected]

      console.log @userId #undefined
      console.log @user() #undefined
      console.log @request.Cookies.cookies
      console.log @request.headers.cookie

I20151110-14:07:29.813(1)? undefined
I20151110-14:07:29.813(1)? undefined
I20151110-14:07:29.813(1)? { meteor_login_token: '7G64y9zbVkDWj7qE1yM1fLP1hq0BzuHladR32rf3IUh' }
I20151110-14:07:29.814(1)? meteor_login_token=7G64y9zbVkDWj7qE1yM1fLP1hq0BzuHladR32rf3IUh