Execute If Allowed

example-method.js

Meteor.methods({
  authorizedMethod() {
    Modules.server.executeIfAllowed( [ 'admin', 'manager' ],  () => {
      // Some secure task to complete here.
    });
  }
});

execute-if-allowed.js

// Relying on a global here but you could use export/import in 1.3 just the same.

Modules.server.executeIfAllowed = ( roles, callback ) => {
  if ( Roles.userIsInRole( Meteor.userId(), roles ) ) {
    callback();
  } else {
    throw new Meteor.Error( '500', 'Sorry. You\'re not allowed to do that!' );
  }
};