bigbluebutton-Github/bigbluebutton-html5/imports/api/users-persistent-data/server/publishers.js

import UsersPersistentData from '/imports/api/users-persistent-data';
import { Meteor } from 'meteor/meteor';
import { extractCredentials } from '/imports/api/common/server/helpers';
import { check } from 'meteor/check';
import Users from '/imports/api/users';

const ROLE_MODERATOR = Meteor.settings.public.user.role_moderator;

async function usersPersistentData() {
  if (!this.userId) {
    return UsersPersistentData.find({ meetingId: '' });
  }
  const { meetingId, requesterUserId } = extractCredentials(this.userId);

  check(meetingId, String);
  check(requesterUserId, String);

  const selector = {
    meetingId,
  };

  const options = {};

  const User = await Users
    .findOneAsync({ userId: requesterUserId, meetingId }, { fields: { role: 1 } });
  if (!User || User.role !== ROLE_MODERATOR) {
    options.fields = {
      lastBreakoutRoom: false,
    };

    // viewers are allowed to see other users' data if:
    // user is logged in or user sent a message in chat
    const viewerSelector = {
      meetingId,
      $or: [
        {
          'shouldPersist.hasMessages.public': true,
        },
        {
          'shouldPersist.hasMessages.private': true,
        },
        {
          loggedOut: false,
        },
      ],
    };
    return UsersPersistentData.find(viewerSelector, options);
  }
  return UsersPersistentData.find(selector, options);
}

function publishUsersPersistentData(...args) {
  const boundUsers = usersPersistentData.bind(this);
  return boundUsers(...args);
}

Meteor.publish('users-persistent-data', publishUsersPersistentData);