I notice that the user still ablle to search collections using the console browser. For example: s = new SubsManager(); sub = s.subscribe('allUsers'); u = Meteor.users.find();
I tried put a condition on the publish ( if (!this.userId) return false ) but with that the user can't login.
what are the best way to avoid unauthorized users subscribe the data before login the app ?
Hello,
I notice that the user still ablle to search collections using the console browser. For example: s = new SubsManager(); sub = s.subscribe('allUsers'); u = Meteor.users.find(); I tried put a condition on the publish ( if (!this.userId) return false ) but with that the user can't login.
what are the best way to avoid unauthorized users subscribe the data before login the app ?
thanks