ambushsabre posted:

The client just has a local copy of the database (which you can only send specific parts of) so that when they update something it can update in realtime and not care about when the server gets around to updating it. They still need to call a method on the server which can figure out permissions and stuff, and if the client's copy and the server's copy differ the client will revert to the server's copy. So in essence someone could gently caress with the DB on their client but as soon as they try and connect to the server again it'll revert back to whatever the "official" version of the DB is.

quick edit: sorry if this isn't clear I just really love meteor, I'm currently working on a writing app with it (source is here please don't kill me I haven't really taken the time to make it clean and nice and fully commented)