bigbluebutton-Github/bigbluebutton-html5/imports/api/guest-users/server/publishers.js

import GuestUsers from '/imports/api/guest-users/';
import Users from '/imports/api/users';
import { Meteor } from 'meteor/meteor';
import Logger from '/imports/startup/server/logger';
import AuthTokenValidation, { ValidationStates } from '/imports/api/auth-token-validation';
import { publicationSafeGuard } from '/imports/api/common/server/helpers';

const ROLE_MODERATOR = Meteor.settings.public.user.role_moderator;

function guestUsers() {
  const tokenValidation = AuthTokenValidation.findOne({ connectionId: this.connection.id });

  if (!tokenValidation || tokenValidation.validationStatus !== ValidationStates.VALIDATED) {
    Logger.warn(`Publishing GuestUser was requested by unauth connection ${this.connection.id}`);
    return GuestUsers.find({ meetingId: '' });
  }

  const { meetingId, userId } = tokenValidation;

  const User = Users.findOne({ userId, meetingId }, { fields: { role: 1 } });
  if (!User || User.role !== ROLE_MODERATOR) {
    Logger.warn(
      'Publishing GuestUser was requested by non-moderator connection',
      { meetingId, userId, connectionId: this.connection.id },
    );

    return GuestUsers.find({ meetingId: '' });
  }
  // Monitor this publication and stop it when user is not a moderator anymore
  const comparisonFunc = () => {
    const user = Users.findOne({ userId, meetingId }, { fields: { role: 1, userId: 1 } });
    const condition = user.role === ROLE_MODERATOR;

    if (!condition) {
      Logger.info(`conditions aren't filled anymore in publication ${this._name}: 
      user.role === ROLE_MODERATOR :${condition}, user.role: ${user.role} ROLE_MODERATOR: ${ROLE_MODERATOR}`);
    }

    return condition;
  };
  publicationSafeGuard(comparisonFunc, this);
  Logger.debug(`Publishing GuestUsers for ${meetingId} ${userId}`);

  return GuestUsers.find({ meetingId });
}

function publish(...args) {
  const boundSlides = guestUsers.bind(this);
  return boundSlides(...args);
}

Meteor.publish('guestUser', publish);