Meteor Model

post_model.js

Post = {
  create: function(data, callback) {
    return Meteor.call('Post.create', data, callback);
  },

  update: function(docId, data, callback) {
    return Meteor.call('Post.update', docId, data, callback);
  },

  destroy: function(docId, callback) {
    return Meteor.call('Post.destroy', docId, callback);
  }
};


Meteor.methods({
  ...

  // Returns {Number} of documents updated
  'Post.update': function(docId, data) {
    check(docId, String);
    check(data, { title: String, desc: String });

    if (!this.userId) throw new Meteor.Error(503, "You must be logged in");

    // if caller doesn't own document this should fail because the query field will not match
    return db.posts.update({_id: docId, ownerId: this.userId}, {$set: data});
  },
  
  ...
});