Secure Meteor collections

beers.ts

import {Mongo} from 'meteor/mongo';
import createCollection from '../util/createCollection';

export interface Beer {
  _id: string,
  name: string,
  variety: string;
  strength: number;
}

export const Beers: Mongo.Collection<Beer> = createCollection<Beer>('beers');
  

createCollection.ts

import {Mongo} from 'meteor/mongo';
import lockCollection from './lockCollection';

export default function createCollection<DocInterface>(name: string): Mongo.Collection<DocInterface> {
  let collection: Mongo.Collection<DocInterface> = new Mongo.Collection<DocInterface>(name);
  return lockCollection<DocInterface>(collection);
}

lockCollection.ts

import {Mongo} from 'meteor/mongo';

const DENY_RULES: Mongo.AllowDenyOptions = {
  insert: () => true,
  update: () => true,
  remove: () => true,
};

export default function lockCollection<DocInterface>(collection: Mongo.Collection<DocInterface>): Mongo.Collection<DocInterface> {
  collection.deny(DENY_RULES);
  return collection;
}

lockCollectionOops.js

import {Mongo} from 'meteor/mongo';

const DENY_RULES = {
  create: () => true,
  update: () => true,
  delete: () => true,
};

export default function lockCollection(collection) {
  collection.deny(DENY_RULES);
  return collection;
}

lockCollectionOops.ts

import {Mongo} from 'meteor/mongo';

const DENY_RULES: Mongo.AllowDenyOptions = {
  create: () => true,
  update: () => true,
  delete: () => true,
};

export default function lockCollection<DocInterface>(collection: Mongo.Collection<DocInterface>): Mongo.Collection<DocInterface> {
  collection.deny(DENY_RULES);
  return collection;
}