javascript - Meteor update access denied despite presence of insecure -


i have insecure package installed , yet following in client console:

meteor.user() object {_id: "4dyaa5wrmxmq7j7xf", profile: object, services: object}_id: "4dyaa5wrmxmq7j7xf"profile: objectname: "mel oug"__proto__: objectservices: objectfacebook: object__proto__: object__proto__: object__definegetter__: function __definegetter__() { [native code] }__definesetter__: function __definesetter__() { [native code] }__lookupgetter__: function __lookupgetter__() { [native code] }__lookupsetter__: function __lookupsetter__() { [native code] }constructor: function object() { [native code] }hasownproperty: function hasownproperty() { [native code] }isprototypeof: function isprototypeof() { [native code] }propertyisenumerable: function propertyisenumerable() { [native code] }tolocalestring: function tolocalestring() { [native code] }tostring: function tostring() { [native code] }valueof: function valueof() { [native code] }get __proto__: function __proto__() { [native code] }set __proto__: function __proto__() { [native code] } va = meteor.user()._id "4dyaa5wrmxmq7j7xf" meteor.users.update(va, {$set: {email: 'the@aarts.com'}}) 1 debug.js:41 update failed: access denied

i'm not sure other relevant code include. have no deny (or allow) rules set up. it's pretty straight forward user setup, can't see might block it.

here's packages got:

ccounts-facebook          1.0.4  login service facebook accounts accounts-google            1.0.4  login service google accounts accounts-twitter           1.0.4  login service twitter accounts aldeed:autoform            5.1.2  create forms automatic insert a... aldeed:collection2         2.3.3  automatic validation of insert , update o... autopublish                1.0.3  publish entire database clients blaze                      2.1.2  meteor reactive templating library cmather:handlebars-server  2.0.0  allows handlebars templates defined o... email                      1.0.6  send email messages insecure                   1.0.3  allow database writes default iron:router                1.0.7  routing designed meteor meteor-platform            1.2.2  include standard set of meteor packages i... mquandalle:jade            0.4.1* jade template language msavin:mongol              1.0.30* insanely handy development package for... service-configuration      1.0.4  manage configuration third-party se... twbs:bootstrap             3.3.4  popular front-end framework de... useraccounts:bootstrap     1.8.1* accounts templates styled twitter boots

the meteor.users collection special case, established structure , permissions. allowed update user.profile field client, insecure package installed.

this work, example:

meteor.users.update(va, {$set: {'profile.email': 'the@aarts.com'}})

emails in general saved server code , pushed provided 'emails' array in user record.

"emails" : [ { "address" : "the@aarts.com", "verified" : false } ],

from meteor docs:

users default allowed specify own profile field accounts.createuser , modify meteor.users.update. allow users edit additional fields, use meteor.users.allow.


Comments

Post a Comment

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

i added new project. made mistake in projectname.conf file in sites-available apache2, led me reinstalling apache2. after reinstalling , re-enabling projects on every page of every project .. <body> run(); </body> .. i've run composer update, restarted service, restarted pc, checked config files, tried disabling new project. there nothing in error log, , access.log: 127.0.0.1 - - [15/may/2015:01:40:47 +0200] "get / http/1.1" 304 181 "-" "mozilla/5.0 (x11; ubuntu; linux x86_64; rv:38.0) gecko/20100101 firefox/38.0" maybe i'm forgetting apache2 reinstall? don't think did different last time installed it. looks haven't setup php correctly. take @ this great guide , maybe you're forgetting link php config apache2.
Read more

php - How can I echo out this array? -

i don't know how go grabbing data in variable , put foreach loop. class tree{ private $info = array( array('name'=>'jim','state'=>'nu','company'=>'nu','phone'=>array('cell'=>'5615111111','office'=>'5611111111'),'email'=>array('primary'=>'exs@example.com','ex@there.com')), array('name'=>'joe smith','city'=>'phoenix','phone'=>'4805551111','email'=>'jsmith@some_email.com'), array('name'=>'john doe','city'=>'chandler','company'=>'doe co.','email'=>array('jdoe@gmail.com','personal'=>'email@email.com'),'phone'=>'6025550002') ); } if you're inside of class, can access private variable using $this->variablename . example, i...
Read more