New to meteor roles a bit confused about meteor-roles HOT 1 CLOSED

Hi @albertomoral

Thanks for trying meteor-roles. The roles collection is not automatically published to the client so that is why you are seeing an empty array. You will have to publish the roles that you want the client to see yourself in a normal publish function.

The reason meteor-roles doesn't automatically publish the complete list is because not everyone will want all clients too have visibility to all roles. So perhaps privileged clients can see the entire list but normal users should only see a reduced subset.

This reduces the potential attack vector for malicious users.

from meteor-roles.